A high-severity memory safety vulnerability in the Linux kernel af_key module could allow a local attacker to cause a system crash or potentially leak sensitive information.

This is an out-of-bounds read vulnerability resulting from uninitialized memory in the af_key module. An attacker with local access can trigger this flaw when an IPComp state is cloned during an XFRM_MSG_MIGRATE operation.

The vulnerability carries a CVSS score of 7.1, indicating a high risk to system stability and data confidentiality. Successful exploitation could lead to local denial-of-service conditions or the exposure of kernel memory contents, which may facilitate further privilege escalation attacks.

Immediate Action: Apply the vendor-supplied patches by updating the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor system logs for kernel panic events or repeated XFRM related errors that may indicate exploitation attempts.

Compensating Controls: Restrict access to local system resources and limit the ability of low-privileged users to execute complex networking operations where possible.

Public Exploit Available: Unknown

Given the potential for system disruption, administrators should prioritize updating kernel packages to the identified fixed versions. Patching is the most effective way to remediate this memory safety issue and prevent potential local exploitation.