The vulnerability in the Linux kernel's amlogic crypto driver arises from double cleanup in meson_crypto_probe(). When meson_allocate_chanlist() fails after partially allocating resources, it unwinds the allocated state locally. However, meson_crypto_probe() also attempts to free the same resources again, causing a double free and subsequent use-after-free in kthread_destroy_worker(), as detected by KASAN. The fix involves handling partial allocation failures entirely within meson_allocate_chanlist() to avoid the outer cleanup path and prevent double freeing. The issue was reproducible on kernel version 7.1-rc2 with KASAN enabled and is now resolved.

The vulnerability leads to a kernel slab-use-after-free condition during device probing, which can cause kernel memory corruption and potential instability or crashes. There is no indication of remote code execution or privilege escalation from the provided data. No known exploits in the wild have been reported.

A fix has been applied to the Linux kernel to prevent the double cleanup and use-after-free. Users should update to a kernel version that includes this fix. Since this is a kernel-level bug, applying the official kernel patch or upgrading to a fixed kernel release is the recommended remediation. Patch status is not explicitly stated but the description confirms the bug has been resolved in the kernel source. Check the Linux kernel vendor advisory or mainline kernel releases for the official fixed version.