A use-after-free vulnerability in the Linux kernel tracing subsystem could allow a local attacker to achieve elevated privileges or cause system instability.

This vulnerability occurs because the module reference count is released prematurely during the cleanup of enable_event triggers. An attacker with local access can exploit this condition to trigger a use-after-free bug, potentially leading to arbitrary code execution or kernel panic.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation allows a local user to escalate privileges or crash the system, which could lead to significant unauthorized access, data integrity loss, or service disruption within the affected environment.

Immediate Action: Update the Linux kernel to version 7.1.6 or later to incorporate the necessary fix for the reference counting logic.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults, which may indicate attempted exploitation of use-after-free conditions.

Compensating Controls: Restrict local shell access to untrusted users and enforce strict kernel module loading policies to limit the attack surface.

Public Exploit Available: exploit_available (unknown).

Given the potential for privilege escalation and system instability, administrators should prioritize updating kernel packages to the patched version. Ensuring that the kernel is running 7.1.6 or newer is the most effective way to eliminate this vulnerability and protect the system from potential local exploitation.