A use-after-free vulnerability in the Linux kernel network bridge multicast implementation can allow a local attacker with low privileges to achieve high system impact.

This flaw is a use-after-free vulnerability within the network bridge multicast component when handling port removal, requiring low privileges and local access with no user interaction.

A successful exploit of this vulnerability could lead to complete system compromise, including unauthorized data access, integrity modification, and system denial of service. The high CVSS score of 7.8 reflects the severe potential impact on confidentiality, integrity, and availability if an attacker executes malicious code via memory corruption.

Immediate Action: Update the Linux kernel to fixed versions 5.15.209, 6.1.175, 6.6.142, 6.12.92, or later as provided by the distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, and anomalous use-after-free error traces related to network bridging.

Compensating Controls: Restrict local shell access and container creation privileges to trusted users to minimize the exposure window for local exploitation.

Public Exploit Available: false

System administrators must prioritize patching the Linux kernel to the designated fixed versions across all vulnerable hosts. Applying kernel updates immediately is essential to prevent local privilege escalation and potential system crashes caused by the use-after-free condition.