This Linux kernel vulnerability is currently confirmed to be actively exploited in the wild and poses a critical risk to system integrity and stability.

The vulnerability exists in the netfilter bridge implementation, specifically within the ebtables SNAT target handling. An attacker with local access can trigger an out of bounds write by manipulating ARP packets, as the kernel fails to ensure the memory range is writable before performing operations on non linear skb fragments.

Successful exploitation of this flaw can lead to a complete compromise of the affected system, including unauthorized data access, privilege escalation, or total system failure. Given the CVSS score of 9.5 and the confirmed active exploitation in the wild, this vulnerability represents a severe threat to operational continuity and data security.

Immediate Action: Update the Linux kernel to the versions provided in the enrichment data (5.10.259, 5.15.210, 6.1.176, or 6.6.143) or the latest available stable release from your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panic events, unexpected crashes related to netfilter or bridge networking, and unauthorized access attempts to local system interfaces.

Compensating Controls: If immediate patching is not feasible, restrict access to the system to authorized users only and consider disabling bridge filtering features if they are not required for current network operations.

Public Exploit Available: Unknown.

The active exploitation of this kernel level vulnerability makes it a critical priority for all administrators. You must verify your kernel version immediately and apply the recommended patches to prevent potential system takeover. Failure to remediate this vulnerability exposes the infrastructure to significant risk from sophisticated threat actors currently leveraging this flaw.