Use-After-Free in LinkStation Poweroff Driver

Executive Summary

This is a use-after-free vulnerability in the Linux kernel's power reset driver for LinkStation devices. It occurs in the linkstation_poweroff_init function where a node pointer is released with of_node_put(dn) before of_match_node() finishes using it. This can lead to memory corruption or crashes when the freed memory is accessed.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is specific to the Linux kernel's power management subsystem, particularly in the linkstation-poweroff driver. Detection requires checking the kernel version and verifying if the affected code path is present. Use commands like 'uname -a' to check the kernel version and 'grep linkstation_poweroff_init /proc/kallsyms' to see if the function is loaded.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could cause system instability or crashes on affected Linux systems using LinkStation power management. It may lead to unexpected reboots, kernel panics, or potential privilege escalation if exploited by local attackers.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for this vulnerability. The patch moves the of_node_put(dn) call after of_match_node() to prevent the use-after-free issue. Check your distribution's security updates or compile a patched kernel version.

Useful 0 Not Useful 0