A locking deficiency in the Linux kernel BPF subsystem may allow a local attacker to cause a system deadlock and denial of service.

This is a concurrency-related vulnerability involving the mmap_lock in the BPF subsystem. The issue arises when zap_vma_range is called without correctly holding the owning mm's mmap_lock, creating a potential AB-BA deadlock condition with other memory management functions.

With a CVSS score of 7.8, this vulnerability poses a significant risk to system availability. A successful exploit causes a kernel-level deadlock, which results in an immediate denial of service, requiring a system reboot to restore functionality.

Immediate Action: Update the Linux kernel to version 7.1.5 or later.

Proactive Monitoring: Monitor system performance and logs for unexpected lock contention or process hangs related to BPF operations.

Compensating Controls: Limit access to BPF-related system calls to highly privileged users or restrict the use of BPF features if they are not required for system operations.

Public Exploit Available: false

The severity of this issue necessitates prompt patching. Administrators should deploy the 7.1.5 kernel update to eliminate the deadlock condition and ensure system stability against potential local denial of service attacks.