Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122

Description The issue is related to a use-after-free error that occurs when volume creation fails in the ubi create volume function. This problem was introduced in version v4.12 and is fixed in Linux Kernel version v5.10.122. The actual impact and attack plausibility of this issue have not yet been proven.

Recommendations For Linux Kernel versions prior to v5.10.122, update to version v5.10.122 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ubi create volume function until a patch is available.