A memory management vulnerability exists in the Linux kernel xfrm subsystem that could allow a local authenticated attacker to achieve elevated privileges or system instability.

The Linux kernel xfrm subsystem fails to properly clear mode callback pointers when state initialization fails before the mode data is published. This results in a use-after-free vulnerability where the garbage collector attempts to dereference stale pointers after the associated module has been unloaded. An attacker with local, low-privileged access can trigger this condition by initiating specific xfrm state setups that intentionally fail.

Successful exploitation of this vulnerability allows an attacker to compromise the integrity and availability of the host system. Given the CVSS score of 7.8, the primary risk is local privilege escalation, which could allow a malicious actor to bypass security controls, access sensitive system data, or cause a kernel panic resulting in a denial of service.

Immediate Action: Update the Linux kernel to version 6.18.42, 7.1.6, or a later stable release where the fix has been backported.

Proactive Monitoring: Monitor system logs for frequent kernel oops or segmentation faults related to the xfrm subsystem or garbage collection tasks.

Compensating Controls: Restrict access to the system to authorized users only, as the vulnerability requires local access to trigger the specific kernel execution path.

Public Exploit Available: No (exploit_available: false)

System administrators should prioritize patching the Linux kernel across all affected environments, particularly on multi-user systems where local privilege escalation poses a significant threat. Applying the provided kernel updates is the only definitive way to resolve this memory corruption vulnerability and ensure system stability.