A high-severity use-after-free vulnerability in the Linux kernel rpmsg driver allows local attackers to trigger memory corruption and potentially achieve arbitrary code execution.

This is a use-after-free vulnerability in the rpmsg_chrdev_probe function. The flaw occurs because the kernel stores a pointer to an object before its initialization is complete, leading to a race condition or invalid pointer usage if the probe fails, affecting unauthenticated local users.

Use-after-free vulnerabilities are highly dangerous as they can be leveraged to corrupt kernel memory, bypass security controls, or gain elevated privileges. Given the CVSS score of 8.4, this flaw poses a significant threat to the stability and security of systems utilizing the rpmsg driver, which is commonly found in embedded and mobile architectures.

Immediate Action: Apply the vendor-provided kernel security updates for the affected kernel branches (6.6.144, 6.12.95, 6.18.38, 7.1.3, or later).

Proactive Monitoring: Review system logs for kernel oops or segmentation faults occurring during driver initialization sequences.

Compensating Controls: If patching is delayed, restrict access to the rpmsg character device nodes to authorized users only.

Public Exploit Available: No

Administrators should schedule an update to the latest stable kernel branch to resolve this use-after-free flaw. Ensuring the kernel is patched is essential to prevent potential exploitation of the rpmsg driver in systems where it is enabled.