A critical double unlock vulnerability in the Linux kernel rxrpc implementation allows unauthenticated attackers to potentially trigger system instability or arbitrary code execution.

This is a double unlock vulnerability within the rxrpc_recvmsg function. An unauthenticated remote attacker can trigger this condition by sending specifically crafted out-of-band (OOB) messages to the affected system.

The vulnerability carries a CVSS score of 9.8, indicating a critical severity level due to the potential for remote code execution. Successful exploitation could lead to full system compromise, unauthorized data access, and significant service disruption, posing a severe risk to organizational operations.

Immediate Action: Update the Linux kernel to version 6.18.40, 7.1.5, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected process terminations related to the rxrpc module.

Compensating Controls: Implement network-level access controls to restrict access to services utilizing the rxrpc protocol to authorized segments only, reducing the attack surface.

Public Exploit Available: Unknown

Given the critical nature of this kernel-level vulnerability and its potential for remote exploitation, immediate patching is required. Administrators should prioritize updating systems running vulnerable kernels to the specified fixed versions to eliminate the risk of system compromise.