The Linux kernel contains a use-after-free vulnerability in the IUCV subsystem that could lead to system crashes or arbitrary code execution by an adjacent attacker.

The vulnerability exists in the af_iucv component where severed connection paths are not correctly cleared from the message queue. This allows a subsequent recvmsg call to access a stale pointer, resulting in a use-after-free condition that can be triggered by an unauthenticated attacker on the local network.

Successful exploitation of this vulnerability can lead to a complete system crash or potential memory corruption. Given the CVSS score of 8.8, this flaw represents a significant risk to system availability and integrity for environments utilizing IUCV communication, potentially allowing unauthorized access or service disruption within the local network segment.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or later, depending on the specific branch in use.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected process terminations associated with the IUCV subsystem.

Compensating Controls: Restrict network access to the affected infrastructure to trusted segments only, as the vulnerability requires local network proximity to exploit.

Public Exploit Available: No

Organizations running Linux kernel environments should prioritize patching as part of their regular maintenance cycle. While the exploit requires local network access, the potential for high-impact memory corruption makes applying the vendor-provided kernel updates the most effective way to remediate this vulnerability.