The vulnerability in the Linux kernel involves a use-after-free (UAF) in the usbio_disconnect() function within the USB miscellaneous driver. The function walks the usbio->cli_list in reverse and uninitializes each auxiliary device. During this process, auxiliary_device_uninit() may free the usbio_client structure if the device is unbound, causing the iterator to dereference freed memory in the next iteration. The fix replaces list_for_each_entry_reverse() with list_for_each_entry_safe_reverse(), caching the previous client before uninitialization to prevent use-after-free. Validation reproduces a KASAN slab-use-after-free error confirming the issue.

This vulnerability can cause use-after-free conditions in kernel memory during USB device teardown, potentially leading to kernel crashes or instability. There is no information about known exploits in the wild. The impact is limited to kernel reliability and potential denial of service due to memory corruption.

A fix for this vulnerability has been implemented in the Linux kernel source code by modifying the iteration method in usbio_disconnect(). Users should update to a Linux kernel version that includes this fix. Since this is not a cloud service, remediation requires applying the updated kernel version. Patch status is not explicitly confirmed in the provided data; users should consult the official Linux kernel advisories or repositories for the fixed version.