A use-after-free vulnerability in the Linux kernel crypto QAT driver allows local users with low privileges to achieve complete system compromise.

This flaw is a use-after-free vulnerability caused by a race condition in the adf_disable_sriov() function during VF2PF work teardown, requiring low privileges and no user interaction.

Successful exploitation of this vulnerability can lead to full system compromise, including confidentiality, integrity, and availability loss. With a high CVSS score of 8.8, an attacker who has obtained local access could escalate privileges or cause kernel panics, resulting in system downtime and unauthorized access to sensitive system resources.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor system logs for kernel panics, KASAN reports referencing qat_pf2vf_resp_wq, or unauthorized local access attempts.

Compensating Controls: Restrict local shell access and apply strict principle-of-least-privilege permissions to prevent untrusted local users from executing arbitrary code or manipulating device drivers.

Public Exploit Available: No (false / unknown)

System administrators must prioritize patching affected Linux kernel instances immediately to remediate this high-severity use-after-free condition. Applying the appropriate stable kernel update prevents local attackers from exploiting driver teardown races to compromise host integrity.