A memory safety flaw in the Linux kernel OcteonTX2 driver exposes the system to potential crashes and exploitation due to a double free condition.

This is a memory corruption issue caused by a double free condition in the otx2_pool_aq_init function. The vulnerability requires local access and, while the CVSS score of 7.0 suggests high severity, the attack complexity is elevated by the requirement for specific error conditions during initialization.

The vulnerability poses a significant risk to system availability and integrity. Successful exploitation could lead to kernel panics, resulting in denial of service, or potentially allow a local attacker to execute arbitrary code with elevated privileges. Given the critical nature of the kernel, this flaw warrants immediate attention in environments utilizing OcteonTX2 hardware.

Immediate Action: Update the Linux kernel to versions 5.10.259, 5.15.210, 6.1.176, 6.6.143, or later.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts related to the network driver stack.

Compensating Controls: Restrict access to the local system to trusted users only to minimize the risk of a local attacker triggering the initialization failure.

Public Exploit Available: False

This vulnerability represents a serious memory safety issue within the kernel. Administrators should prioritize patching the affected kernel versions across all systems utilizing OcteonTX2 hardware to eliminate the risk of exploitation.