CVE-2024-26875

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc1-syzkaller-00046-gf1a27f081c1f

Description A use-after-free vulnerability has been resolved in the Linux kernel, specifically in the pvrusb2 media driver. The issue occurred when Task A set disconnect flag to a non-zero value, resulting in Task B's condition being met and releasing mp, leading to a slab-use-after-free error in pvr2 context set notify. This vulnerability was reported by Syzbot and is related to the pvr2 context set notify function in the pvrusb2-context.c file.

Recommendations To resolve this issue, place the disconnect flag assignment operation after all code in pvr2 context disconnect() to avoid the use-after-free error. This change will prevent the mp release from occurring prematurely, thus fixing the vulnerability.