A high-severity use-after-free vulnerability in the Linux kernel vsock/vmci subsystem could allow a local attacker to cause a kernel crash or potentially execute arbitrary code.

This is a use-after-free flaw within the vsock/vmci transport layer, triggered by improper handling of connection resets during the handshake. The vulnerability requires a local attacker with low privileges to interact with the vsock interface.

Successful exploitation of this vulnerability allows a local user to escalate privileges or cause a system-wide denial of service by crashing the kernel. With a CVSS score of 8.8, this flaw represents a significant risk to system stability and data integrity, particularly in multi-tenant environments where local access is provided to untrusted users.

Immediate Action: Update the Linux kernel to version 5.10.258, 5.15.209, 6.1.175, 6.6.142, or later as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages related to vsock or vmci operations.

Compensating Controls: Restrict access to virtual machine communication interfaces if they are not required for system operations.

Public Exploit Available: false

This vulnerability presents a high risk to Linux-based systems. Administrators should prioritize patching the kernel across all affected environments, particularly on servers that support local user shell access or virtualization workloads, to prevent potential privilege escalation.