A use-after-free vulnerability in the Linux kernel amdxdna job scheduler poses a high risk to system integrity and stability for affected local users.

The vulnerability exists in the amdxdna driver where the scheduler stores a raw pointer to a process memory structure without holding a structural reference. This allows the memory to be freed while the scheduler still holds the pointer, resulting in a use-after-free condition that can be triggered by a local authenticated user.

Successful exploitation of this flaw could allow a local attacker to achieve arbitrary code execution at the kernel level, leading to a complete compromise of the system. Given the CVSS score of 7.8, this vulnerability represents a significant threat to confidentiality, integrity, and availability, particularly in multi-tenant environments or systems where untrusted users have local access.

Immediate Action: Update the Linux kernel to version 6.18.42, 7.1.6, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel panic events or unusual memory-related errors that may indicate exploitation attempts.

Compensating Controls: Restrict access to the amdxdna device files to only authorized users and services to reduce the attack surface for local exploitation.

Public Exploit Available: No

This vulnerability presents a high risk to systems utilizing the amdxdna driver, as kernel-level flaws are critical targets for local privilege escalation. Administrators should prioritize patching the kernel to the specified stable versions as soon as possible to mitigate the risk of local system compromise.