A use-after-free vulnerability in the Linux kernel writeback subsystem allows local users to achieve high system compromise and potential code execution.

This is a use-after-free flaw in the inode_switch_wbs_work_fn function involving improper handling of writeback work items and reference counts, requiring low privileges with local access.

Successful exploitation of this flaw can result in complete system compromise, unauthorized data access, and persistent system instability or kernel panics. The CVSS score of 7.8 reflects a high severity threat, primarily constrained by the requirement for local access or authenticated execution on the target operating system.

Immediate Action: Update the Linux kernel to version 6.18.25, 7.0.2, or later where the writeback work queue looping logic has been corrected.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, and unexpected reboots that may indicate exploitation attempts.

Compensating Controls: Restrict local shell access and enforce strict the principle of least privilege to minimize the risk of unauthorized users executing malicious local code.

Public Exploit Available: False

Administrators managing affected Linux distributions must prioritize applying the latest kernel patches to address this use-after-free flaw. Because local kernel vulnerabilities present a direct path to total host takeover, deploying the updated kernel packages promptly is essential for maintaining infrastructure security.