A critical vulnerability in the Linux kernel sch_codel component may allow an attacker to trigger a system-wide Denial of Service (DoS) via memory access manipulation.

This flaw exists in the sch_codel packet scheduling component, where improper handling of the qdisc_tree_reduce_backlog function during packet peeking leads to memory errors. The vulnerability is exploitable by unauthenticated attackers.

Successful exploitation allows an attacker to crash the affected system, resulting in significant service downtime and operational disruption. Given the critical CVSS score of 9.8, this flaw poses a severe risk to availability for any infrastructure relying on the affected Linux kernel versions.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected service restarts that may indicate attempted exploitation.

Compensating Controls: Restrict network access to untrusted interfaces and employ kernel-level hardening measures to mitigate potential memory corruption exploits.

Public Exploit Available: Yes (per enrichment.public_pocs)

Due to the critical severity and the availability of public proof-of-concept code, organizations should prioritize patching their Linux kernels. Apply the provided stable kernel updates immediately to eliminate the risk of remote Denial of Service attacks.