CyberRota Analysis
AI-GeneratedA use-after-free vulnerability exists in the Linux kernel's GPIO aggregator, where improper handling of memory during error conditions can lead to dereferencing a freed pointer. This flaw allows a concurrent thread to access invalid memory, potentially leading to crashes or arbitrary code execution. Organizations using affected Linux systems should prioritize patching this vulnerability to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: fix a potential use-after-free On error we free aggr->lookups->dev_id before removing the entry from the lookup table. If a concurrent thread calls gpiod_find() before we remove the entry, it could iterate over the list and call gpiod_match_lookup_table() which unconditionally dereferences dev_id when calling strcmp(). Reverse the order of cleanup.