A use-after-free vulnerability in the Linux kernel industrial I/O subsystem affects multiple kernel branches and presents a high risk of privilege escalation or system disruption.

This vulnerability is a use-after-free flaw located in the iio_hw_consumer_alloc error cleanup path within the Linux kernel, where unsafe iteration over buffer lists occurs. The attack vector requires local access with low privileges and no user interaction.

A successful exploit of this vulnerability could allow a local attacker with low privileges to execute arbitrary code, escalate privileges, or cause kernel panics resulting in denial of service. The CVSS score of 7.8 indicates high severity because an attacker who has obtained local access can fully compromise the confidentiality, integrity, and availability of the underlying operating system.

Immediate Action: Update the Linux kernel to version 5.10.259, 5.15.210, 6.1.176, 6.6.143, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, and unexpected reboots that may indicate exploitation attempts against the industrial I/O subsystem.

Compensating Controls: Restrict local shell access and ensure principle of least privilege is strictly enforced to limit users who can execute untrusted code locally.

Public Exploit Available: No

Given the high severity score and potential for complete system compromise, IT administrators must prioritize updating affected Linux kernel packages across all environments. Apply the recommended kernel versions immediately to eliminate the underlying use-after-free vulnerability.