Use-after-free Vulnerability in Linux Kernel Affecting Multiple Devices

CVE-2024-56764

Summary

In the Linux kernel, a vulnerability exists where failure during the process of adding a disk can lead to a use-after-free condition. Specifically, within the ublk_abort_requests() function, the kernel attempts to abort all inflight requests using a reference to gendisk. If the add_disk() operation fails, it may result in accessing a freed gendisk during subsequent abort operations, potentially leading to system instability or crashes. This issue has been addressed by ensuring that gendisk is properly detached from the ublk device in scenarios where add_disk() does not succeed, thereby maintaining system integrity and security.

References