A double free vulnerability in the Linux kernel qed driver could allow a local attacker to cause system instability or potential memory corruption.

This is a double free vulnerability located in the qed_cxt_tables_alloc function. The flaw is triggered during error recovery when CID bitmap allocations fail, allowing an unauthenticated local attacker to potentially cause a kernel panic or exploit memory state.

Successful exploitation of this vulnerability could lead to a denial of service through kernel crashes, which disrupts critical business operations. Given the CVSS score of 8.4, this vulnerability represents a high risk to system availability and integrity, particularly in environments relying on the qed driver for network infrastructure.

Immediate Action: Update the Linux kernel to version 5.10.259, 5.15.210, 6.1.175, or 6.6.142, or apply the relevant upstream patches.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages that may indicate memory management errors or attempted exploitation.

Compensating Controls: Restrict local user access to the system to reduce the attack surface, as local execution is required to trigger this flaw.

Public Exploit Available: Unknown

This vulnerability presents a significant risk to system stability and should be addressed promptly. Administrators are advised to prioritize the application of kernel security patches in all affected environments to prevent potential denial of service attacks.