An unauthenticated attacker can trigger a denial of service condition in the Linux kernel by exploiting inefficient real-time task migration logic.

The vulnerability involves the RT_PUSH_IPI mechanism within the scheduler, which performs aggressive task migration. An unauthenticated attacker can induce significant lock contention on the runqueue, leading to a system-wide denial of service as multiple CPUs attempt to acquire the same lock simultaneously.

The exploitation of this vulnerability results in a denial of service, which can cause critical system instability or complete service outages. Given the CVSS score of 7.5, this represents a high risk for production environments relying on the Linux kernel, as the attack requires no authentication and can be performed remotely. Successful exploitation could lead to significant operational downtime, impacting business continuity and availability of hosted services.

Immediate Action: Update the Linux kernel to the versions provided in the enrichment data: 5.10.261, 5.15.212, 6.1.178, or 6.6.145, depending on the current distribution branch.

Proactive Monitoring: Monitor system logs and performance metrics for spikes in CPU usage or kernel-level lock contention warnings that may indicate an ongoing exploitation attempt.

Compensating Controls: Ensure that systems are properly segmented and that network access to sensitive kernel-level interfaces is restricted to authorized traffic only.

Public Exploit Available: Unknown

The risk associated with this kernel-level vulnerability is significant due to the potential for unauthenticated denial of service. IT administrators should prioritize the deployment of the upstream patches provided by the Linux kernel stable repository as part of their next maintenance cycle to ensure system stability and resilience against potential exploitation.