A high-severity use-after-free flaw in the Linux kernel zram driver can lead to arbitrary code execution and full system compromise.

This flaw is a use-after-free vulnerability caused by a race condition between the bio completion handler and the writeback task in the zram driver, requiring low local privileges to exploit.

A successful exploit of this vulnerability can allow an attacker with local system access to compromise confidentiality, integrity, and availability. Although the attack vector is local, the CVSS score of 7.8 reflects the severity of potential root-level compromise and system instability, which could lead to critical data exposure or denial of service.

Immediate Action: Update the Linux kernel to version 7.0.12 or later, or apply the official fix commits ebe2cbefc86291fa7f386447a81995640df4e2fd and bf62f69574b19720ae5fbbbcdf24a0c4e3e05e43.

Proactive Monitoring: Monitor kernel logs for segmentation faults, panic events, or memory corruption indicators related to zram and block device writeback operations.

Compensating Controls: Restrict local shell access and auditing user privileges to minimize the risk of untrusted execution on vulnerable hosts.

Public Exploit Available: No

Given the high CVSS score and the severity of kernel-level use-after-free vulnerabilities, administrators must prioritize patching affected systems. Applying the verified kernel updates promptly prevents potential local privilege escalation and ensures system stability.