A use-after-free vulnerability in the awk_sub function of BusyBox allows unauthenticated attackers to cause a Denial of Service.

This vulnerability is a use-after-free flaw located in the awk_sub function within editors/awk.c, triggered by supplying a specially crafted AWK script to the application, requiring no user interaction or authentication.

A successful exploitation of this vulnerability leads to a Denial of Service, which can disrupt critical embedded services and underlying system operations. With a CVSS score of 7.5, the high severity rating reflects the potential for complete service unavailability, threatening operational continuity and system stability.

Immediate Action: Update BusyBox to the latest patched version once released by the vendor, or apply the official upstream patch addressing the use-after-free condition in editors/awk.c.

Proactive Monitoring: Monitor system logs for unexpected application crashes, segmentation faults, and abnormal resource utilization patterns associated with BusyBox processes.

Compensating Controls: Restrict access to environments where users can supply arbitrary or untrusted AWK scripts to BusyBox, thereby mitigating the attack surface.

Public Exploit Available: False

Security teams must prioritize monitoring for vendor patches addressing this memory management flaw in BusyBox. Applying the official fix as soon as it becomes available is critical to preventing potential Denial of Service conditions in affected environments.