A high-severity use-after-free vulnerability in the Linux kernel Reliable Datagram Sockets (RDS) subsystem could allow a local attacker to execute arbitrary code or cause system instability.

The RDS component fails to properly isolate network namespaces during socket lookups, allowing messages to be delivered across boundary lines. This leads to a use-after-free condition when a connection is destroyed in one namespace while still referenced by a socket in another, which can be triggered by an authenticated local user.

Successful exploitation of this flaw can lead to local privilege escalation, unauthorized memory access, or a complete system crash. Given the CVSS score of 7.8, this vulnerability poses a significant risk to the integrity and availability of host systems, particularly in multi-tenant environments or containerized infrastructures where network namespace isolation is a primary security boundary.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults related to the RDS module, which may indicate attempted exploitation.

Compensating Controls: If patching is not immediately feasible, disable the RDS kernel module (rds) to remove the attack surface, provided the functionality is not required by local applications.

Public Exploit Available: Unknown

System administrators should prioritize patching the Linux kernel to the identified secure versions to prevent potential local privilege escalation. Because this vulnerability involves deep kernel memory management, standard security controls may be bypassed if an attacker gains local access, making prompt kernel updates the only reliable method of mitigation.