A high-severity use-after-free vulnerability exists in the Linux kernel PPP (Point-to-Point Protocol) implementation that could allow a local attacker to escalate privileges or crash the system.

This flaw is a use-after-free vulnerability occurring within the pppol2tp_recv function. It arises because the kernel fails to properly defer the freeing of PPP channel memory to an RCU grace period, allowing an attacker with local user privileges to trigger a race condition during memory access.

A successful exploit of this vulnerability could allow a local attacker to execute arbitrary code with elevated kernel privileges, leading to full system compromise. The CVSS score of 7.8 indicates a high risk, as it allows for significant impact on confidentiality, integrity, and availability. Organizations relying on Linux-based infrastructure, particularly those utilizing PPP or L2TP tunneling, face a critical exposure if local user access is provided to untrusted parties.

Immediate Action: Update the Linux kernel to version 5.15.216, 6.1.183, 6.6.148, 6.12.101, or newer as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected crash reports that may indicate exploitation attempts targeting memory corruption.

Compensating Controls: Restrict access to the system to authorized users only, as the vulnerability requires local access to the target environment to trigger the race condition.

Public Exploit Available: Yes, a public proof-of-concept repository exists on GitHub.

Given the potential for privilege escalation and the existence of a public proof-of-concept, this vulnerability should be prioritized for patching. Administrators must ensure that kernel updates are tested and deployed across all affected Linux systems to mitigate the risk of local exploitation.