A critical race condition within the Linux kernel networking subsystem poses a severe risk of remote code execution, requiring immediate kernel updates.

The vulnerability is a race condition in the BPF skmsg component, specifically within the sk_psock_verdict_data_ready function. This flaw allows an unauthenticated attacker to cause unauthorized memory access and corruption when a socket is inserted into a sockmap before TLS RX is configured, bypassing necessary synchronization guards.

This vulnerability carries a CVSS score of 9.8, reflecting its potential for full system compromise. Successful exploitation allows an attacker to execute arbitrary code with kernel-level privileges, leading to complete data exfiltration, total system downtime, or the establishment of persistent backdoors within the network infrastructure.

Immediate Action: Apply the latest security patches provided by your Linux distribution maintainer, ensuring the kernel is updated to at least version 6.6.142, 6.12.92, 6.18.34, or 7.0.11.

Proactive Monitoring: Monitor system logs for kernel-related warnings or unexpected system reboots, which may indicate crash attempts or successful exploitation of the race condition.

Compensating Controls: While kernel patches are the only definitive fix, network-level ingress filtering and the use of modern security hardening features like eBPF program verification may limit the exposure of vulnerable endpoints.

Public Exploit Available: Unknown

Given the critical nature of kernel-level vulnerabilities and the potential for remote code execution, organizations must prioritize the deployment of the provided kernel updates. System administrators should verify their current kernel versions immediately and schedule maintenance windows to apply the necessary patches, as this vulnerability allows for unauthenticated access to the most privileged layer of the operating system.