An information disclosure and privilege escalation vulnerability in the Linux kernel XFRM subsystem allows local authenticated attackers to leak sensitive migration notifications across network namespaces.

This is an improper network namespace routing flaw in the XFRM and pfkey migration notification functions, requiring low local privileges and no user interaction to trigger.

The exploitation of this vulnerability can result in unauthorized cross-namespace information disclosure, potentially exposing sensitive endpoint addresses and network security parameters to unprivileged tenants on the same host. Although local access is required, the CVSS score of 7.3 highlights a high severity level due to the potential compromise of confidentiality boundaries within multi-tenant container or virtualization environments.

Immediate Action: Update the Linux kernel to version 5.10.259, 5.15.210, 6.1.176, 6.6.143, or later depending on the active release branch.

Proactive Monitoring: Monitor host system logs and container boundary metrics for anomalous inter-namespace communication patterns or unexpected socket subscriptions.

Compensating Controls: Restrict local shell access and harden multi-tenant namespace boundaries using strict containerization policies while awaiting kernel updates.

Public Exploit Available: False

Administrators managing multi-tenant Linux environments must prioritize applying the latest kernel patches to enforce strict network namespace boundaries. Failure to update leaves systems vulnerable to cross-tenant information leakage and potential privilege escalation by local users.