A use-after-free vulnerability in rsync versions 3.0.1 through 3.4.1 poses a significant risk of remote code execution or system instability for environments utilizing the --xattrs flag.

The vulnerability stems from an improper handling of a length parameter in the receive_xattr function, which leads to a use-after-free condition during a qsort call. An authenticated attacker can trigger this flaw if the victim executes rsync with the -X or --xattrs command-line arguments.

The exploitation of this vulnerability can lead to unauthorized information disclosure, data integrity compromise, or total service disruption due to application crashes. Given the CVSS score of 7.4, this is a High severity issue that, while requiring a specific configuration, impacts a core utility used extensively in data backup and synchronization workflows.

Immediate Action: Update rsync to the latest patched version provided by the Samba project or your respective Linux distribution maintainer.

Proactive Monitoring: Review rsync execution logs for unusual command-line arguments, specifically the use of the -X or --xattrs flags, and monitor for unexpected process terminations or segmentation faults.

Compensating Controls: If patching is delayed, disable the use of extended attribute synchronization by removing the -X or --xattrs flags from all rsync backup scripts and automated tasks.

Public Exploit Available: Unknown

Organizations should prioritize patching all instances of rsync within their environment to eliminate the risk of memory corruption. Because this vulnerability is triggered by common command-line flags, the impact across enterprise infrastructure may be broad, and immediate remediation is strongly advised to maintain system integrity.