A double-free and use-after-free vulnerability exists in the Linux kernel ipu7 media driver, allowing local attackers with low privileges to achieve high impact on confidentiality, integrity, and availability.

This is a memory management vulnerability involving double-free and use-after-free conditions within error paths of the ipu7_isys_init and ipu7_psys_init functions. An attacker requires local access and low privileges with no user interaction to trigger the flaw.

A successful exploit of this memory corruption vulnerability can allow an attacker with local access to compromise system integrity, access sensitive data, or crash the operating system, resulting in denial of service. The assigned CVSS score of 7.8 establishes this as a high-severity risk that demands prompt patching on affected systems.

Immediate Action: Update the Linux kernel to version 6.18.39, 7.1.4, or later versions where the fix has been applied.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected reboots that may indicate memory corruption attempts.

Compensating Controls: Restrict local user access and audit system permissions to ensure untrusted users cannot execute arbitrary code or interact with vulnerable hardware drivers.

Public Exploit Available: No (unknown)

Administrators managing systems utilizing the affected Linux kernel versions should prioritize applying the official kernel updates immediately. Because this flaw allows local privilege escalation or system disruption via memory corruption, timely patching is critical to maintaining host security.