A critical vulnerability in the Linux kernel Distributed Lock Manager (DLM) allows unauthenticated remote attackers to trigger use-after-free conditions, potentially leading to arbitrary code execution.

The vulnerability stems from improper handling of message sequence ordering within the DLM send queue. An unauthenticated attacker can trigger this flaw via network-based requests, resulting in memory corruption and use-after-free states.

The flaw carries a CVSS score of 9.8, reflecting its potential for complete system compromise. Successful exploitation allows an attacker to achieve arbitrary code execution or cause kernel panics, leading to significant service disruption and unauthorized access to sensitive data processed by the affected server.

Immediate Action: Update the Linux kernel to version 6.6.145, 6.12.97, 6.18.40, 7.1.5, or later as appropriate for your specific distribution branch.

Proactive Monitoring: Monitor kernel logs for recurring stability issues or unexpected system crashes that may indicate exploitation attempts targeting the DLM subsystem.

Compensating Controls: Restrict network access to DLM-related ports to trusted internal nodes only, as this limits the attack surface for remote exploitation.

Public Exploit Available: Unknown

Given the critical severity of this vulnerability and the potential for remote exploitation, organizations running Linux systems with DLM enabled must prioritize patching. Administrators should verify their kernel version and apply the upstream fixes immediately to prevent potential system compromise.