A use-after-free vulnerability in the Linux kernel Server Message Block client component allows local authenticated attackers to compromise system confidentiality, integrity, and availability.

This is a use-after-free memory flaw in the cifs_swn_notify function of the Linux kernel CIFS/SMB client, requiring local access with low privileges and no user interaction.

A successful exploit of this vulnerability could allow a local authenticated attacker to execute arbitrary code, escalate privileges, or cause a kernel panic, leading to severe system downtime and complete compromise of host confidentiality and integrity. The CVSS score of 7.8 reflects the high severity of achieving full system compromise locally.

Immediate Action: Update the Linux kernel to patched versions 6.1.178, 6.6.145, 6.12.97, 6.18.39, or later where the fix is integrated.

Proactive Monitoring: Monitor system logs for unexpected kernel crashes, segmentation faults, or abnormal CIFS mount behavior.

Compensating Controls: Restrict local shell access and audit user accounts to prevent untrusted users from executing arbitrary binaries on the host.

Public Exploit Available: false

Given the high severity score and potential for complete host compromise, administrators should prioritize applying the official kernel updates immediately. Restricting local access provides an important secondary defense while patching schedules are coordinated.