A use-after-free vulnerability in the Linux kernel esd_usb driver could allow a local attacker to achieve code execution or system instability.

The vulnerability occurs within the esd_usb_disconnect function, where network devices are freed before the associated USB Request Blocks (URBs) are terminated. This leads to a use-after-free condition when the driver subsequently attempts to dereference freed memory to kill anchored URBs, requiring low-privileged local access to trigger.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation could allow a local user to compromise system integrity and availability, potentially leading to privilege escalation or kernel-level crashes that disrupt critical business services.

Immediate Action: Update to Linux kernel version 5.15.217, 6.1.178, 6.6.145, 6.12.97, or later to incorporate the corrected teardown sequence.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults that occur during USB device removal events, which may indicate attempted exploitation.

Compensating Controls: Restrict physical or logical access to the system to prevent unauthorized local users from interacting with the vulnerable USB CAN driver.

Public Exploit Available: Unknown

The Linux kernel vulnerability identified here poses a significant risk to system stability and security. Administrators should prioritize patching the kernel across all relevant deployments to ensure the teardown sequence is correctly handled, thereby preventing the use-after-free condition. Apply the recommended kernel versions as part of the next standard maintenance cycle to mitigate this risk.