A critical race condition vulnerability in the Linux kernel sunrpc subsystem could allow an unauthenticated remote attacker to trigger memory corruption and potentially achieve system compromise.

This is a race condition vulnerability (CWE-362) occurring within the sunrpc TLS handshake handling. When a handshake is cancelled, a race between the cancellation and the completion callback can lead to the corruption of the internal swait_queue, which is reachable by an unauthenticated attacker.

The vulnerability carries a CVSS score of 9.8, reflecting its potential for full system compromise. Successful exploitation could lead to arbitrary code execution within the kernel, unauthorized access to sensitive data, or persistent denial of service, causing significant operational downtime and potential data breaches for systems relying on RPC-based communications.

Immediate Action: Update the Linux kernel to version 6.6.145, 6.12.97, 6.18.40, 7.1.5, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic events that may indicate memory corruption or unexpected thread behavior in the sunrpc subsystem.

Compensating Controls: If immediate patching is not feasible, restrict network access to RPC-based services to trusted hosts only to minimize the attack surface.

Public Exploit Available: Unknown

Given the critical nature of this kernel-level vulnerability, organizations should treat the application of these patches as a high-priority task. Linux distributions will likely release updated packages shortly; verify your vendor documentation and apply the recommended kernel versions to mitigate the risk of remote code execution and system instability.