A use-after-free vulnerability exists in the Linux kernel power sequence (pwrseq) debugfs implementation, which could allow a local attacker with low privileges to compromise system integrity.

The vulnerability stems from improper reference counting within the pwrseq_debugfs_seq_next function, where the use of automatic cleanup macros leads to a use-after-free condition. An attacker with low-level local access can trigger this state by interacting with the debugfs interface, allowing the kernel to operate on memory that has already been released.

The exploitation of this flaw poses a significant risk to system stability and security. As a use-after-free in the kernel memory space, successful exploitation may lead to a local privilege escalation, unauthorized data access, or a complete system crash. With a CVSS score of 7.8, this vulnerability is categorized as high severity, indicating that it should be prioritized for remediation to prevent potential local exploitation.

Immediate Action: Update the Linux kernel to version 6.12.95, 6.18.38, 7.1.3, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panic events or segmentation faults that may indicate an exploitation attempt targeting the power sequence debugfs interface.

Compensating Controls: Restrict access to the debugfs filesystem to authorized administrative users only, as debugfs is generally intended for debugging purposes and should not be exposed in production environments.

Public Exploit Available: Unknown

Given the potential for local privilege escalation and the critical role the kernel plays in system security, organizations should treat this vulnerability with high urgency. Administrators are advised to apply the necessary kernel updates during the next maintenance window to eliminate the use-after-free condition and harden the system against potential local attacks.