A race condition vulnerability in the Linux kernel IPv6 stack may result in a system crash, posing a critical availability risk to affected infrastructure.

The vulnerability stems from a race condition in the addrconf_dad_failure function where improper lock management allows a concurrent ipv6_del_addr operation to modify the state of an address entry. This leads to the use of a poisoned list entry and a subsequent general protection fault, which can be triggered by an unauthenticated local user.

The primary impact of this vulnerability is a denial of service, as the triggered general protection fault will cause the kernel to crash. In environments where kernel stability is vital for uptime, such as high-availability clusters or critical network infrastructure, this could result in significant service disruption. While the CVSS score of 9.8 reflects the potential for severe impact, the requirement for local interaction limits the attack surface compared to a remote exploit.

Immediate Action: System administrators must update the Linux kernel to one of the patched versions: 5.10.261, 5.15.212, 6.1.178, or 6.6.145. A system reboot is required to apply the kernel update.

Proactive Monitoring: Monitor system logs for kernel oops or general protection fault messages that indicate an attempt to trigger this crash.

Compensating Controls: Ensure that access to the affected servers is strictly restricted to authorized personnel to prevent local exploitation of the kernel.

Public Exploit Available: Unknown

Given the critical nature of kernel-level vulnerabilities, it is imperative that organizations prioritize patching their Linux environments. Administrators should test the provided kernel updates in a staging environment before deploying them to production to ensure compatibility, then proceed with a rolling update strategy to mitigate the risk of system instability.