A double-free memory vulnerability in the Linux kernel Amlogic crypto driver poses a risk of local privilege escalation or system denial of service.

The vulnerability exists in the meson_crypto_probe function within the Amlogic crypto driver, where a partial allocation failure causes an improper error handling path. This leads to a double-free of per-flow resources, which an authenticated local attacker can exploit to trigger a slab-use-after-free condition.

Successful exploitation of this memory corruption vulnerability could lead to a system crash, resulting in denial of service, or potentially allow a local attacker to execute arbitrary code with elevated privileges. With a CVSS score of 7.8, this flaw is considered high severity, particularly in environments where untrusted users have local access to the system.

Immediate Action: Apply the latest security patches provided by your Linux distribution or update the kernel to the stable versions 5.10.261, 5.15.212, 6.1.178, or 6.6.145 where the fix is integrated.

Proactive Monitoring: Monitor kernel logs for signs of memory corruption, such as KASAN reports or kernel panics associated with the meson_crypto driver.

Compensating Controls: Restrict access to local system resources and hardware interfaces to authorized users only, reducing the attack surface for local exploitation vectors.

Public Exploit Available: Unknown

Given the potential for kernel-level memory corruption, system administrators should prioritize patching the Linux kernel across all affected environments. While the attack requires local access, the severity of a kernel-level exploit necessitates prompt remediation to prevent unauthorized privilege escalation.