A vulnerability in the Linux kernel Btrfs file system driver could allow a local attacker to trigger a use-after-free condition, potentially resulting in system instability or privilege escalation.

The vulnerability exists in the btrfs_drop_extent_map_range function, where split extent maps incorrectly inherit the EXTENT_FLAG_LOGGING flag. This improper handling leads to a use-after-free vulnerability when the affected map is freed while still present on the inode's modified_extents list.

The flaw carries a CVSS score of 7.8, indicating a high severity risk for local environments. Successful exploitation allows a local user with low privileges to trigger kernel memory corruption, which typically results in a system crash or denial of service, and potentially provides a vector for local privilege escalation or arbitrary code execution within the kernel context.

Immediate Action: Update the Linux kernel to version 6.12.101, 6.18.42, 7.1.6, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panic events or memory-related warnings associated with the Btrfs file system driver.

Compensating Controls: Restrict access to systems utilizing Btrfs to trusted users only to minimize the risk of a local attacker triggering the vulnerable code path.

Public Exploit Available: No

Given the potential for kernel-level memory corruption, this vulnerability should be treated with high priority. Organizations using the Btrfs file system should verify their current kernel versions and apply the recommended patches immediately to ensure system stability and security.