A memory management flaw in the Linux kernel batman-adv driver allows local authenticated attackers to achieve high impact across confidentiality, integrity, and availability.

This is a memory management and synchronization vulnerability in the batman-adv component, specifically involving incorrect handling of work items during backbone gateway entry removal, requiring low local privileges to trigger.

Successful exploitation of this kernel vulnerability can lead to complete system compromise, including unauthorized data access, arbitrary code execution, and kernel panics resulting in denial of service. The CVSS score of 7.8 indicates high severity, as an attacker with local access can leverage the flaw to escalate privileges and take full control of the affected host operating system.

Immediate Action: Update the Linux kernel to version 5.10.258, 5.15.209, 6.1.175, 6.6.142, or later where the fix is integrated.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, and unexpected reboots that may indicate exploitation attempts against the batman-adv driver.

Compensating Controls: Restrict local shell access and audit user permissions to ensure that only trusted personnel hold accounts on the target systems.

Public Exploit Available: false

Given the high severity score and the potential for complete host takeover, administrators should prioritize applying the updated Linux kernel packages during the next maintenance window. Restricting local access to the affected servers serves as an effective temporary defense until patches can be deployed.