The Linux kernel contained a vulnerability in the phonet network subsystem where phonet_device_destroy() removed a phonet_device from the per-network device list using list_del_rcu() but freed the object immediately. This premature freeing violates RCU lifetime rules because concurrent readers may still hold references to the object, resulting in a slab-use-after-free. The vulnerability was resolved by replacing the immediate free with kfree_rcu(), which defers freeing until after the RCU grace period, preventing use-after-free conditions.

The vulnerability could lead to use-after-free memory corruption in the kernel, which may cause system instability or potential escalation of privileges if exploited. However, there are no known exploits in the wild at this time.

A fix has been implemented in the Linux kernel source code that replaces immediate freeing with kfree_rcu() for the phonet_device object. Users should apply the official kernel updates that include this fix. Since this is not a cloud service, remediation depends on deploying patched kernel versions. Patch status is not explicitly confirmed here; users should consult the official Linux kernel advisories for the relevant fixed versions.