A use-after-free vulnerability exists in the Linux kernel AF_IUCV subsystem that could lead to unauthorized memory access or system instability.

The vulnerability exists in the afiucv_hs_rcv function, where a socket reference is not properly maintained. An attacker can trigger a race condition where a socket is closed and freed while a callback handler is still attempting to access it, leading to a use-after-free condition.

Successful exploitation of this vulnerability could allow an unauthenticated local attacker to trigger a kernel panic, resulting in a denial-of-service condition. Furthermore, memory corruption vulnerabilities in the kernel often provide a pathway for privilege escalation, potentially allowing an attacker to gain full control over the compromised system. The CVSS score of 8.8 reflects the high potential impact on system availability and integrity.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages that may indicate memory corruption attempts or unexpected crashes in the AF_IUCV subsystem.

Compensating Controls: Restrict access to the system to authorized users only, as the attack vector requires local access to the affected environment.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to system stability and security due to the potential for kernel-level memory corruption. Administrators should prioritize patching the kernel across all affected environments as part of their regular maintenance cycle to prevent exploitation. Relying on host-based security controls is insufficient, as the primary mitigation is the application of the upstream kernel patch.