A use-after-free vulnerability in the Linux kernel v3d driver allows local users to achieve high privileges and system compromise.

This vulnerability is a use-after-free flaw within the drm/v3d graphics driver CPU job ioctl error path, requiring local access with low privileges and no user interaction.

A successful exploitation of this flaw can lead to a complete compromise of the affected operating system, resulting in unauthorized data access, integrity loss, and system denial of service. The high CVSS score of 7.8 reflects the severity of potential local privilege escalation and memory corruption within the kernel space.

Immediate Action: Update the Linux kernel to version 6.12.93, 6.18.34, 7.0.11, or later, where the v3d driver error path memory handling is unified into the kref destructor.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unusual driver error messages related to v3d CPU jobs.

Compensating Controls: Restrict local shell access and limit user capabilities on systems utilizing the v3d graphics driver if immediate kernel patching is not feasible.

Public Exploit Available: No

Administrators should prioritize testing and applying the latest stable kernel updates to remediate this memory corruption risk. Prompt deployment prevents local threat actors from leveraging the use-after-free condition for privilege escalation.