A high-severity use-after-free vulnerability in the Linux kernel mac80211 subsystem could allow an adjacent attacker to crash the system or execute malicious code.

The vulnerability is a use-after-free condition in the mac80211 wireless stack, specifically triggered during the cessation of a Block Acknowledgment (BA) session. It is exploitable by an unauthenticated adjacent attacker (AV:A/AC:L/PR:N/UI:N).

The impact of a use-after-free in the kernel includes potential privilege escalation or kernel-level denial of service. Given the CVSS score of 8.8, this vulnerability poses a critical risk to systems utilizing the affected wireless drivers, potentially resulting in complete loss of system integrity.

Immediate Action: Update the Linux kernel to version 7.1.8 or later, or apply the specific patches provided by your Linux distribution maintainer.

Proactive Monitoring: Review system audit logs for repeated kernel oops or crash reports involving the mac80211 or wireless subsystems.

Compensating Controls: Limit exposure to untrusted wireless environments where possible and ensure that kernel hardening features are enabled to mitigate the impact of memory corruption.

Public Exploit Available: No

Immediate patching is required for any environment relying on Linux-based wireless networking. Administrators should verify that their kernel version has been updated to the specific patch level addressing this use-after-free condition.