A use-after-free (UAF) vulnerability in the Linux kernel's xen-blkback component was resolved. The flaw occurred when reading I/O statistics via sysfs concurrently with tearing down a frontend device, due to lack of synchronization between reading statistics and freeing data. This could lead to UAF or NULL pointer dereference. The issue was fixed by introducing a read-write lock for synchronization.