A high-severity use-after-free vulnerability in the Linux kernel af_unix component could allow a local attacker to escalate privileges or crash the system.

The unix_stream_data_wait function performs an unsafe read on the receive queue without proper locking. This allows a local authenticated user to trigger a race condition, leading to a use-after-free read.

The CVSS score of 8.8 highlights the high risk associated with this local privilege escalation vector. A successful exploit grants the attacker full control over the affected system, making this a critical concern for multi-user environments.

Immediate Action: Update the Linux kernel to version 6.6.143, 6.12.92, 6.18.34, 7.0.11, or newer as provided by your distribution vendor.

Proactive Monitoring: Monitor for suspicious local activity, such as unexpected process crashes or attempts to access restricted memory regions by non-privileged users.

Compensating Controls: Where patching is delayed, minimize the number of users with local shell access and utilize security modules like SELinux or AppArmor to restrict process capabilities.

Public Exploit Available: Unknown

Local privilege escalation vulnerabilities are often utilized in post-exploitation scenarios. It is highly recommended to apply the kernel patch immediately to prevent unauthorized escalation of privileges on your Linux infrastructure.