A high severity use after free vulnerability in the Linux kernel allows authenticated local attackers to potentially disrupt system stability or escalate privileges.

This is a use after free vulnerability within the page reporting component of the memory management subsystem. An authenticated local attacker can trigger this flaw during a power management suspend operation to cause memory corruption, requiring low privileges to execute.

The vulnerability carries a CVSS score of 7.8, indicating a high risk to system integrity and availability. Successful exploitation could allow a local attacker to crash the host system, leading to denial of service, or potentially gain elevated privileges, resulting in full system compromise.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, or 7.1.8 or later, as these versions contain the necessary security patches.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected process terminations that coincide with power state transitions.

Compensating Controls: Restrict local system access to authorized users only to minimize the risk of a malicious actor triggering the vulnerable code path.

Public Exploit Available: exploit_available (false)

Given the high CVSS score and the critical nature of the Linux kernel, organizations should prioritize patching affected systems during the next maintenance window. Implementing the provided kernel updates is the only definitive way to mitigate the risk of memory corruption and potential privilege escalation associated with this vulnerability.