A memory management defect in the Linux kernel mac80211 subsystem poses a high risk of local privilege escalation or system crashes.

The vulnerability exists within the ieee80211_set_unsol_bcast_probe_resp function, which incorrectly frees memory during allocation failures. This results in a double free condition that can be triggered by a local attacker with low privileges.

Successful exploitation of this vulnerability can lead to a kernel panic, causing unexpected system downtime and service disruption. Furthermore, because the flaw involves memory corruption within the kernel, there is a significant risk that a local attacker could achieve elevated privileges or execute arbitrary code with kernel level permissions. The CVSS score of 7.8 indicates a high severity, reflecting the potential for complete compromise of system integrity and availability.

Immediate Action: Update your Linux kernel to version 6.12.101, 6.18.42, 7.1.6, or a later stable release where this patch has been incorporated.

Proactive Monitoring: Monitor system logs for KASAN reports or kernel oops messages, particularly those referencing memory management functions or RCU errors, which may indicate attempted exploitation.

Compensating Controls: Restrict local access to the system to only authorized users, as this vulnerability requires local access to the affected hardware or virtualized environment.

Public Exploit Available: No

Given the potential for kernel level exploitation, system administrators should prioritize patching the Linux kernel across all affected environments. While the attack vector is local, the severity of a successful exploit necessitates timely remediation to prevent unauthorized privilege escalation or system instability. Apply the recommended kernel updates as part of your standard maintenance cycle to mitigate this risk.