A use-after-free vulnerability in the Linux kernel GPIB driver allows local authenticated attackers to achieve high impact on confidentiality, integrity, and availability.

This flaw is a use-after-free vulnerability residing in the GPIB driver IO ioctl handlers (read, write, command, and wait), triggered by premature release of internal mutex locks where local authenticated users can cause race conditions.

A successful exploitation of this vulnerability could grant a local attacker full control over the affected operating system, leading to complete compromise of confidentiality, integrity, and availability. Because the CVSS score is 7.8, it represents a high severity threat that requires local access, but successful execution can result in kernel-level code execution, system crashes, and potential privilege escalation across shared environments.

Immediate Action: Update the Linux kernel to version 6.18.22, 6.19.12, or later where the reference counting fix has been implemented.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unusual driver interaction attempts related to the GPIB subsystem.

Compensating Controls: Restrict local shell access and limit execution privileges for untrusted users to minimize the exposure window for local attack vectors.

Public Exploit Available: No

System administrators managing Linux environments with GPIB driver support must treat this vulnerability with high urgency. Applying the vendor security updates immediately is critical to prevent potential local privilege escalation and system instability stemming from the use-after-free condition.