A critical use-after-free vulnerability in the Linux kernel wireless subsystem poses a risk of system instability and potential code execution.

The vulnerability exists in the mac80211 component where MLO link RX stats percpu buffers are freed prematurely while RCU readers may still hold references to them. This race condition, triggered by an unauthenticated attacker, results in a use-after-free scenario that can lead to memory corruption or system crashes.

Successful exploitation of this flaw can result in a denial of service through kernel panics or, in complex scenarios, lead to arbitrary code execution within the kernel context. Given the CVSS score of 8.8, this vulnerability represents a high risk to infrastructure stability and data integrity, particularly for systems utilizing high-performance wireless networking configurations.

Immediate Action: Update the Linux kernel to version 6.18.42, 7.1.6, or a later stable release where the RCU synchronization logic has been corrected.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts associated with the mac80211 driver or wireless network interface management.

Compensating Controls: Ensure that systems are running with kernel hardening features enabled, such as KASAN or hardware-assisted memory protection, to mitigate the impact of memory corruption flaws.

Public Exploit Available: Unknown

This vulnerability highlights the critical importance of maintaining up-to-date kernel versions in production environments. Administrators should prioritize the deployment of the provided patches across all affected Linux systems to eliminate the risk of memory corruption and maintain system availability.