A critical memory corruption vulnerability in the Linux kernel IPv4 stack, introduced in version 6.0, poses a risk of system instability or unauthorized memory access.

This is a packet construction flaw within the __ip_append_data function that fails to account for fraggap during paged allocation. An attacker with local access can trigger this condition by combining MSG_MORE and MSG_SPLICE_PAGES flags, potentially leading to memory corruption or denial of service.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation could lead to local privilege escalation or complete system compromise, resulting in significant operational downtime or the exposure of sensitive kernel memory.

Immediate Action: Administrators must update the Linux kernel to version 6.6.144, 6.12.95, 6.18.38, 7.1.3, or 7.2-rc1 immediately.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unusual memory usage patterns that may indicate exploitation attempts.

Compensating Controls: Restrict local user access to the system to minimize the attack surface, as this vulnerability requires local privileges to execute the malicious packet construction.

Public Exploit Available: No (no confirmed public exploit exists in the provided data).

Given the potential for kernel level memory corruption, this vulnerability should be treated with high priority. Organizations running affected kernel versions should prioritize testing and deploying the provided patches to ensure system stability and security.