A memory corruption vulnerability in the Linux kernel bpf subsystem allows authenticated local users to achieve high system impact.

This is an improper memory management flaw within the bpf subsystem where temporary sysctl write buffers allocated via kvzalloc are incorrectly freed using kfree instead of kvfree, requiring low local privileges.

Successful exploitation of this flaw can lead to severe kernel memory corruption, potentially allowing a local attacker to execute arbitrary code, escalate privileges, or cause a complete denial of service via system crashes. While the CVSS score of 7.8 reflects a high severity rating constrained primarily by the requirement for local access, the potential for total kernel compromise makes prompt remediation vital for protecting host integrity.

Immediate Action: Update the Linux kernel to version 5.10.260, 5.15.211, 6.1.177, 6.6.144, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected reboots that may indicate memory corruption attempts.

Compensating Controls: Restrict local shell access and apply the principle of least privilege to ensure only trusted users can execute code on the host.

Public Exploit Available: No — exploit_available (false / unknown)

Given the severity of potential kernel memory corruption, administrators must prioritize updating affected Linux kernel packages to the patched versions as soon as they are made available by distribution maintainers. Applying these updates promptly ensures the prevention of local privilege escalation and maintains overall host security.