CyberRota Analysis
AI-GeneratedA use-after-free vulnerability exists in the Linux kernel's llcp_sock_release() function, which improperly unlinks sockets from the local sockets list without verifying their state, potentially leading to memory corruption. This flaw could allow an attacker to exploit the vulnerability to execute arbitrary code or crash the system. Organizations using affected Linux distributions should prioritize patching this vulnerability to mitigate potential exploitation risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free in llcp_sock_release() llcp_sock_release() unconditionally unlinks the socket from the local sockets list. However, if the socket is still in connecting state, it is on the connecting list. Fix this by checking the socket state and unlinking from the correct list.