A use-after-free vulnerability in the Linux kernel USB Test and Measurement Class driver could allow an authenticated local attacker to achieve high impact across confidentiality, integrity, and availability.

This is a use-after-free flaw residing in the usbtmc_release function, triggered when pending anchored URBs are not properly flushed or killed, requiring low local privileges.

Successful exploitation of this kernel vulnerability can lead to complete system compromise, including arbitrary code execution, privilege escalation, and kernel panic resulting in system downtime. Although the attack vector requires local access, the CVSS score of 7.8 highlights the severity of potential full host takeover and operational disruption.

Immediate Action: Update the Linux kernel to the appropriate fixed stable release version, such as 5.10.253, 5.15.203, 6.1.168, or later.

Proactive Monitoring: Monitor system logs for kernel oops, segmentation faults, and unexpected reboots that may indicate memory corruption or exploit attempts.

Compensating Controls: Restrict local system access and ensure least privilege principles are strictly enforced to prevent unauthorized local users from executing arbitrary code.

Public Exploit Available: No (no confirmed public exploit in available data)

Administrators must prioritize updating vulnerable Linux kernel packages across all affected systems. Apply the necessary vendor security updates immediately to eliminate the underlying memory management flaw and prevent potential local exploitation.