A use-after-free vulnerability in the Linux kernel block layer affects multiple versions and can lead to complete system compromise.

This flaw is a use-after-free vulnerability in the block multi-queue subsystem, triggered when a task sleeps after peeking at a cached request before it is popped. The attack requires local access with low privileges and no user interaction.

A successful exploit of this vulnerability can result in full confidentiality, integrity, and availability loss, potentially allowing local users to escalate privileges or crash the operating system. With a CVSS score of 7.8, this high-severity flaw poses a significant risk to host security and multi-tenant environments where untrusted local users have shell access.

Immediate Action: Update the Linux kernel to version 6.12.104, 6.18.45, 7.0.11, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, and unexpected reboots that may indicate exploitation attempts.

Compensating Controls: Restrict local shell access and implement strict principle-of-least-privilege controls to minimize the number of users capable of executing local code.

Public Exploit Available: false

Given the high severity and potential for total system compromise, administrators should apply the appropriate kernel updates immediately. Prioritize testing and deploying the patched kernel packages across all affected Linux infrastructure to eliminate local privilege escalation vectors.