The Linux kernel vdpa driver had a vulnerability where the driver_override field was accessed without proper locking during driver probing via __driver_attach(). Specifically, the bus' match() callback is invoked without the device lock held, causing a potential use-after-free condition. The vulnerability was fixed by adopting the generic driver_override infrastructure in the driver core, which ensures proper locking internally. This change prevents unsafe concurrent access and eliminates the UAF risk. The vulnerability affects Linux kernel versions before 7.0.0-28.28.1 as used in multiple Ubuntu LTS and related distributions.

The vulnerability could lead to a use-after-free condition in the Linux kernel vdpa driver, which may cause kernel instability or potentially allow an attacker to execute arbitrary code or escalate privileges if exploited. However, no known exploits in the wild have been reported for this issue.

A fix is available in Linux kernel versions 7.0.0-28.28.1 and later. Users should update their Linux kernel to this version or newer to remediate the vulnerability. Since this is not a cloud service, manual patching is required. There are no vendor advisories indicating that no action is needed.