kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend()

A use-after-free flaw was found in vhostnetsetbackend in drivers/vhost/net.c in the virtio network subcomponent in the Linux kernel due to a double fget. This issue could allow a local attacker to crash the system, and could lead to a kernel information leak problem...

The vulnerability of the vhost_net_set_backend function (drivers/vhost/net.c) in the Linux kernel’s virtio subcomponent allows a attacker to cause a service failure and expose sensitive information.

The vulnerability of the vhostnetsetbackend function drivers/vhost/net.c in the Linux kernel’s virtio subcomponent is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure and expose sensitive information...

UBUNTU-CVE-2013-4127

Use-after-free vulnerability in the vhostnetsetbackend function in drivers/vhost/net.c in the Linux kernel through 3.10.3 allows local users to cause a denial of service OOPS and system crash via vectors involving powering on a virtual machine...