A use-after-free vulnerability in the Linux kernel Display Processor Unit driver affects specific kernel versions, potentially allowing local attackers to achieve complete system compromise.

This is a use-after-free vulnerability in the drm/msm/dpu driver caused by mixing devm and drmm memory management functions during driver teardown, requiring low local privileges to exploit.

A successful exploitation of this flaw can lead to a complete compromise of confidentiality, integrity, and availability on the host system. Given the CVSS score of 7.8, the vulnerability poses a high risk to multi-tenant or shared environments where local users have untrusted access.

Immediate Action: Update the Linux kernel to version 6.18.34, 7.0.11, or later where the dpu_writeback_init function has been corrected to use drmm functions.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected reboots associated with the Display Processor Unit driver teardown.

Compensating Controls: Restrict local shell access and unprivileged user capabilities to minimize the exposure window for local privilege escalation vectors.

Public Exploit Available: No

System administrators must prioritize patching the Linux kernel to the designated stable releases to eliminate the memory management mismatch. Applying these kernel updates prevents local attackers from triggering use-after-free conditions and maintaining kernel stability.