A use-after-free vulnerability in the Linux kernel virt_wifi driver allows local authenticated attackers to achieve arbitrary code execution or system instability.

This vulnerability is a use-after-free flaw caused by incorrect handling of device registration and unregistration within the virt_wifi net driver, requiring low local privileges.

A successful exploitation of this flaw can result in complete system compromise, privilege escalation, or kernel panics leading to denial of service. The CVSS score of 7.8 reflects the high severity associated with local root-level impact on affected operating system instances.

Immediate Action: Apply the vendor-provided kernel updates or patch versions 5.15.203, 6.1.168, 6.6.134, and 6.12.81 (or later) immediately.

Proactive Monitoring: Monitor system logs for kernel panics, KASAN slab use-after-free reports, or unexpected reboots associated with network driver operations.

Compensating Controls: Restrict local shell access and ensure principle of least privilege is enforced to limit untrusted users from executing arbitrary code on the host.

Public Exploit Available: No (false / unknown)

Administrators managing Linux environments utilizing the virt_wifi driver must prioritize updating their kernel packages to the fixed versions. Prompt remediation is critical to prevent potential local privilege escalation and system crashes resulting from memory safety violations.