A critical vulnerability in the Linux kernel handshake subsystem could lead to system instability, resource exhaustion, or potential memory corruption via unauthenticated network vectors.

The vulnerability exists due to reversed arguments in the list_splice_init function within the handshake_net_exit routine. This prevents pending handshake requests from being properly drained during network namespace destruction, resulting in leaked references and a list corruption race condition.

Successful exploitation of this flaw can lead to a complete system crash or denial of service by exhausting kernel resources. Given the CVSS score of 9.8 and the unauthenticated nature of the attack vector, this vulnerability poses a significant risk to the availability and integrity of mission critical infrastructure relying on the Linux kernel.

Immediate Action: Apply the vendor-provided patches by updating the Linux kernel to versions 6.12.93, 6.18.44, 7.0.12, or later.

Proactive Monitoring: Monitor system logs for kernel panics, memory allocation failures, or unusual handshake-related error messages during network namespace lifecycle events.

Compensating Controls: While no direct mitigation exists for the kernel logic flaw, restrict network access to the affected services to reduce the attack surface until the kernel can be updated.

Public Exploit Available: Unknown.

Due to the critical severity of this kernel-level vulnerability, administrators must prioritize patching cycles to incorporate the corrected kernel versions. The potential for resource exhaustion and system instability necessitates immediate action to ensure the continued reliability of affected host environments.