A high-severity use-after-free vulnerability in the Linux kernel batman-adv module may allow an adjacent attacker to compromise system stability or execute arbitrary code.

The batadv_mcast_purge_orig function fails to wait for an RCU grace period after removing entries, leading to a use-after-free condition. The attacker must have adjacent network access to reach the vulnerable code path.

With a CVSS score of 8.8, this vulnerability poses a severe threat to system security. Exploitation could lead to arbitrary code execution with kernel privileges, resulting in a total compromise of the affected host.

Immediate Action: Update the Linux kernel to version 5.10.258, 5.15.209, 6.1.175, 6.6.142, or newer as provided by your distribution vendor.

Proactive Monitoring: Monitor kernel ring buffers and logs for segmentation faults or memory access violations that could indicate an attempted exploit.

Compensating Controls: Disable the batman-adv module if not explicitly required by your network architecture to eliminate the attack surface entirely.

Public Exploit Available: Unknown

This vulnerability should be treated with high urgency. Administrators should verify their kernel versions against the provided fixed releases and apply patches as part of an emergency update cycle where feasible.