The Linux kernel's uio_pci_generic_sva driver allocated memory for struct uio_pci_sva_dev using devm_kzalloc() in its probe() function. However, it incorrectly called kfree() on this memory both on the probe() error path and in the remove() function. Since devm_kzalloc() allocations are automatically freed by the device resource management system when the device is detached, these explicit kfree() calls could cause a double free. The vulnerability was identified through static analysis and manual review. The resolution involved removing the manual kfree() calls and the associated error handling label to prevent double freeing of memory.

Double free vulnerabilities can lead to undefined behavior including memory corruption, potential kernel crashes, or escalation of privileges if exploited. However, no known exploits in the wild have been reported for this issue. The impact is limited to the Linux kernel's uio_pci_generic_sva driver and occurs during error handling or device removal.

A fix has been implemented by removing the manual kfree() calls in the affected driver code. Users should apply the official Linux kernel update that includes this fix once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the official patch and update guidance.