A high severity use after free vulnerability in the Linux kernel pktgen module could allow a local attacker to crash the system or execute arbitrary code.

The pktgen_change_name function incorrectly handles the replacement of proc entries while holding a lock, leading to a use after free condition. This requires low privileges and local access to the system.

A successful exploit could result in memory corruption, system crashes, or potential code execution at the kernel level. With a CVSS score of 7.8, this vulnerability represents a significant threat to local system security.

Immediate Action: Update the affected Linux kernel to version 6.18.44, 7.1.8, 7.2, or later.

Proactive Monitoring: Monitor system logs for kernel oops or memory management errors that might indicate an attempt to exploit the pktgen module.

Compensating Controls: Disable the pktgen module if it is not required for system functionality to eliminate the attack vector entirely.

Public Exploit Available: Unknown

Given the risks associated with kernel level memory corruption, prompt patching is essential. If immediate patching is not feasible, consider unloading the vulnerable pktgen module to protect the system until a maintenance window is available.