A race condition vulnerability in the Linux kernel packet subsystem could allow a local authenticated attacker to achieve full system compromise.

The flaw exists in the packet_set_ring function, where an unlocked window during ring reconfiguration creates a race condition with NETDEV_UNREGISTER events. A local attacker with low privileges can exploit this inconsistency to re-register a fanout hook after the associated network device has been removed, resulting in a use-after-free or memory corruption scenario.

The vulnerability carries a CVSS score of 7.8, reflecting its potential for complete system compromise. Successful exploitation allows a local user to gain high-level system privileges, leading to unauthorized data access, complete control over the affected host, and potential lateral movement within the network.

Immediate Action: Update the Linux kernel to the versions specified above (5.10.265, 5.15.216, 6.1.183, or 6.6.148) or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults related to packet processing, or unexpected network interface state transitions.

Compensating Controls: Restrict local access to the system to authorized personnel only, as the vulnerability requires local access to trigger the race condition.

Public Exploit Available: Unknown.

Given the potential for privilege escalation and the critical nature of kernel-level vulnerabilities, administrators should prioritize patching affected systems. Coordinate with your Linux distribution maintainer to apply the necessary kernel updates during the next maintenance window to mitigate this risk.