A use after free vulnerability in the Linux kernel network stack allows a local attacker to trigger memory corruption, posing a high risk to system integrity and stability.

This is a use after free flaw in the IPv4 IGMP multicast handling code. When a network device is destroyed, the kernel fails to unlink multicast groups from the hash table before scheduling them for RCU reclamation, allowing local users with low privileges to access freed memory.

Successful exploitation of this vulnerability allows a local attacker to crash the system or potentially execute arbitrary code with kernel level privileges. Given the CVSS score of 7.8, this represents a significant threat to internal security, as it facilitates privilege escalation and complete compromise of the affected host.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or newer as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for KASAN reports or kernel panic events that may indicate attempts to trigger memory corruption or use after free conditions.

Compensating Controls: Restrict local user access to the system and ensure that only trusted users have the ability to manage network interfaces or trigger device destruction events.

Public Exploit Available: Unknown

This vulnerability presents a high risk to system stability and security due to the potential for privilege escalation. Administrators should prioritize patching the Linux kernel across all affected environments, particularly on multi user systems or container hosts where local privilege escalation poses a direct threat to isolation boundaries.