A critical double-free vulnerability in the Linux kernel SMB client may allow an unauthenticated remote attacker to cause a system crash or potentially execute arbitrary code.

This flaw is a double-free memory corruption issue occurring in the SMB2_close() function. The vulnerability is triggered when a response-bearing attempt returns a replayable error, causing the system to incorrectly handle memory cleanup and resulting in a stale buffer being freed multiple times.

The vulnerability carries a CVSS score of 9.8, indicating a critical severity level due to its potential for remote exploitation without requiring authentication. Successful exploitation could lead to total system compromise, including service disruption through kernel panics or the potential for arbitrary code execution within the kernel context.

Immediate Action: Update the Linux kernel to version 6.6.145, 6.12.96, 6.18.39, or 7.1.4, depending on the distribution branch in use.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts related to the smb client or network file system activity.

Compensating Controls: Restrict access to SMB services at the network level by limiting trusted clients, which reduces the attack surface available to potential remote adversaries.

Public Exploit Available: No (exploit_available: false)

Given the critical nature of this kernel-level memory corruption flaw, administrators should prioritize patching their Linux kernel environments immediately. Organizations utilizing SMB mounts should ensure they are tracking the specified stable kernel releases to incorporate the fix for this double-free vulnerability.