A high-severity use-after-free vulnerability in the Linux kernel block cgroup subsystem allows local authenticated attackers to achieve arbitrary code execution or system compromise.

This is a use-after-free vulnerability caused by a race condition in __blkcg_rstat_flush() when multiple block cgroups are released concurrently, requiring local authenticated access with low privileges.

A successful exploitation of this vulnerability could lead to local privilege escalation, arbitrary code execution, or complete system instability resulting in denial of service. The CVSS score of 7.8 reflects the high potential impact on system confidentiality, integrity, and availability, even though the attack vector requires local access.

Immediate Action: Update the Linux kernel to patched versions such as 6.6.144, 6.12.95, 6.18.38, 7.1.3, or later depending on the active distribution branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or anomalous crash reports that might indicate memory corruption attempts.

Compensating Controls: Restrict local shell access and apply the principle of least privilege to minimize the risk of unauthorized users executing malicious code locally.

Public Exploit Available: No — no confirmed public exploit exists in the available data.

Administrators managing systems running affected Linux kernel versions must prioritize applying the latest upstream kernel updates. Because local attackers can potentially trigger memory corruption and escalate privileges, patching the kernel promptly is critical to maintaining system security.