A use-after-free vulnerability in the Linux kernel Open vSwitch module could allow a local attacker to trigger memory corruption and potentially gain elevated privileges.

The vulnerability exists in the attach_meter function, where a newly created meter is exposed to other CPUs before the attachment process is fully validated. If the attachment fails, the object may be freed while still in use, resulting in a use-after-free condition. An attacker with local access and low privileges can potentially trigger this race condition.

Exploitation of this use-after-free flaw may result in system crashes or unauthorized memory access. As this impacts the Open vSwitch networking stack, it could be leveraged to gain control over network traffic processing or escalate privileges on the host. The CVSS score of 7.8 reflects the high risk associated with kernel-level memory corruption.

Immediate Action: Apply the latest security updates and upgrade the kernel to version 6.6.151, 6.12.103, 6.18.44, or 7.1.8.

Proactive Monitoring: Monitor for kernel oops or unexpected service restarts related to the openvswitch module.

Compensating Controls: If immediate patching is not possible, restrict access to network management functions and limit the ability of low-privileged users to interact with Open vSwitch configurations.

Public Exploit Available: Unknown

This vulnerability highlights the risks inherent in complex networking modules. Administrators should ensure that all Linux systems utilizing Open vSwitch are patched immediately to mitigate the risk of memory corruption and potential privilege escalation.