A critical use-after-free vulnerability in the Linux kernel rxrpc subsystem permits unauthenticated attackers to potentially achieve remote code execution or system instability.

This is a concurrency flaw in the rxrpc network protocol implementation where the kernel fails to synchronize backlog preallocation with socket teardown. An unauthenticated attacker can trigger a race condition, leading the kernel to reference freed memory while processing service backlog queues.

The vulnerability carries a CVSS score of 9.8, reflecting its potential for full system compromise. Successful exploitation allows an attacker to execute arbitrary code with kernel-level privileges, leading to complete loss of confidentiality, integrity, and availability. Furthermore, the nature of this memory corruption flaw is likely to result in kernel panics and unplanned service outages for affected systems.

Immediate Action: Apply the latest kernel security patches provided by your distribution vendor, specifically ensuring the kernel is updated to at least 5.10.266, 5.15.217, 6.1.184, or 6.6.148.

Proactive Monitoring: Monitor system logs for kernel oops, segmentation faults, or unusual system crashes that may indicate exploitation attempts or memory corruption.

Compensating Controls: While no direct virtual patch exists, restricting access to the affected service at the network perimeter can reduce the attack surface for exposed systems.

Public Exploit Available: Unknown

Given the critical severity and the potential for total system compromise, administrators must prioritize patching the Linux kernel across all affected environments. Organizations should verify their kernel versions immediately and coordinate a maintenance window to apply the necessary updates provided by their upstream kernel maintainers or distribution vendors.