A double-free vulnerability in the Linux kernel CAN/peak_usb driver could allow a local attacker to cause a kernel panic or potentially execute arbitrary code.

The issue resides in the peak_usb_start function, where an error during URB submission triggers an incorrect memory management sequence. Because the URB is flagged with URB_FREE_BUFFER, the system attempts to free the buffer twice, leading to a double-free condition. This requires local access and low-level privileges to execute.

This vulnerability poses a significant risk to system stability and security. A successful exploit could lead to a system-wide denial of service or, in specific scenarios, provide a path for memory corruption based exploits. With a CVSS score of 7.8, it is considered a high-severity issue that necessitates prompt patching to prevent potential privilege escalation.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, or 7.1.8.

Proactive Monitoring: Review dmesg and system logs for error messages related to USB device initialization or memory management faults.

Compensating Controls: Disable the affected CAN/peak_usb module if it is not required for system operation to reduce the attack surface.

Public Exploit Available: Unknown

Kernel vulnerabilities involving double-free conditions are critical due to their potential for exploitation. Security teams should expedite the deployment of patched kernel versions to all affected Linux-based systems.