A use-after-free and double-free vulnerability in the Linux kernel processor frequency driver allows local authenticated attackers to achieve high impact on confidentiality, integrity, and availability.

This flaw is a memory management defect involving a use-after-free and double-free condition in the pcc_cpufreq_do_osc function, requiring low local privileges and no user interaction.

A successful exploit of this vulnerability could lead to complete system compromise, unauthorized data access, system crashes, and denial of service. The CVSS score of 7.8 reflects the high severity of the threat, particularly for multi-tenant environments or systems where untrusted local users have shell access.

Immediate Action: Update the Linux kernel to patched versions including 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, and unexpected reboots that may indicate exploitation attempts.

Compensating Controls: Restrict local shell access and auditing user privileges to minimize the risk of malicious actors executing code locally.

Public Exploit Available: No

Administrators should prioritize updating the Linux kernel across all affected environments to eliminate the underlying memory corruption vector. Applying the vendor-supplied patches promptly ensures robust protection against potential local privilege escalation and system destabilization.