The Linux kernel's octeontx2-pf driver contained a use-after-free vulnerability in the otx2_tc_add_flow() function. Specifically, the code called kfree_rcu(new_node, rcu) to free memory and then dereferenced the freed 'new_node' pointer on subsequent lines. Since the code region is not RCU safe due to a mutex acquisition occurring shortly after, this sequence could cause unsafe memory access. The patch reorders the code to perform dereferences before freeing the memory, eliminating the use-after-free condition.

Successful exploitation of this vulnerability could lead to memory corruption, potentially allowing an attacker with local privileges to cause denial of service or escalate privileges by manipulating kernel memory. The CVSS vector indicates local attack complexity with low privileges required and no user interaction, impacting confidentiality, integrity, and availability at a high level.

A fix has been implemented in the Linux kernel to reorder the code and prevent use-after-free. Users and administrators should apply the official Linux kernel updates that include this patch once available. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories for the current remediation status and apply updates accordingly.