The Linux kernel contained a use-after-free vulnerability in the tipc_mon_reinit_self() function of the TIPC (Transparent Inter-Process Communication) subsystem. The function iterated over the tipc_net(net)->monitors[] array without holding the RTNL lock, although the array is protected by RTNL. This improper locking led to a use-after-free condition detected by KASAN, as tipc_mon_reinit_self() is called from tipc_net_finalize(), which is generally protected by RTNL except when called from tipc_net_finalize_work(). The fix involved holding the RTNL lock in tipc_net_finalize_work() to prevent concurrent access issues.

This vulnerability allows a local attacker with limited privileges to cause a use-after-free condition in kernel memory, potentially leading to memory corruption. The CVSS vector indicates high impact on confidentiality, integrity, and availability (C:H/I:H/A:H), meaning exploitation could result in full system compromise or denial of service. However, exploitation requires local access and limited privileges.

A fix has been implemented in the Linux kernel by ensuring the RTNL lock is held during the execution of tipc_mon_reinit_self() when called from tipc_net_finalize_work(). Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly provided here; check the official Linux kernel advisories or vendor updates for the fixed kernel version and apply the update accordingly.