A high-severity use-after-free vulnerability in the Linux kernel TIPC protocol may allow a local attacker to cause a system crash or escalate privileges.

The flaw occurs in tipc_aead_decrypt() where the system fails to take a reference on the network namespace before performing decryption. This leads to a slab-use-after-free scenario if the network namespace is destroyed while a decryption operation is in progress.

TIPC is frequently used for high-speed inter-process communication in distributed systems. A use-after-free condition can be weaponized to achieve arbitrary code execution or cause significant instability, threatening the integrity of inter-process communications and the security of the underlying host.

Immediate Action: Update the Linux kernel to version 5.10.260, 5.15.211, 6.1.177, or 6.6.144.

Proactive Monitoring: Monitor for kernel-level memory errors or unusual behavior in processes utilizing the TIPC protocol.

Compensating Controls: If the TIPC protocol is not required for system operations, disable the tipc kernel module to eliminate the attack surface entirely.

Public Exploit Available: No (exploit_available: false)

Given the nature of the TIPC protocol and its role in process communication, this vulnerability should be treated with high urgency. Organizations should verify if their kernels are affected and apply the recommended patches to prevent potential privilege escalation or system compromise.