An unauthenticated vulnerability in the Linux kernel pcrypt subsystem can be exploited to cause a denial of service via system instability.

The pcrypt module fails to properly clear the padata completion callback when falling back to a direct child AEAD request. This allows an asynchronous completion process to trigger a callback for a request that was never properly enrolled, leading to potential kernel-level memory corruption or crashes.

Successful exploitation of this vulnerability results in a denial of service, causing the affected system to crash or become unresponsive. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to system availability, particularly for critical infrastructure or production servers relying on the affected kernel versions.

Immediate Action: Apply the latest kernel security updates provided by your distribution vendor, specifically ensuring the kernel is updated to at least version 5.10.261, 5.15.212, 6.1.178, or 6.6.145.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or repetitive crashes in the crypto subsystem that may indicate exploitation attempts.

Compensating Controls: If immediate patching is not feasible, restrict access to the affected service by implementing network-level filtering or disabling the pcrypt module if it is not required for your specific workload.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to kernel stability and service uptime. Administrators should prioritize the deployment of the provided kernel patches across all affected environments to prevent potential denial of service attacks. Testing updates in a staging environment is advised before widespread deployment to production systems.