A high-severity use-after-free vulnerability in the Linux kernel TIPC module could allow a local or remote authenticated attacker to compromise system integrity.

This is a use-after-free vulnerability located within the TIPC (Transparent Inter-Process Communication) socket tracepoint implementation. The vulnerability requires authenticated access to the system or network (AV:N/AC:L/PR:L/UI:N), allowing a lower-privileged user to trigger the flaw.

The ability to exploit a kernel-level use-after-free allows an attacker to escalate privileges or cause a system-wide denial of service. With a CVSS score of 8.8, this vulnerability is a significant concern for multi-tenant environments or systems where untrusted users have low-level network access.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, 7.1.8, or newer.

Proactive Monitoring: Monitor for unexpected kernel behavior or crashes associated with TIPC socket operations or socket tracepoint dumps.

Compensating Controls: If immediate patching is not feasible, restrict access to the TIPC protocol if it is not required for system functionality.

Public Exploit Available: No

Security teams should prioritize the update of any systems running the TIPC module. Given the potential for privilege escalation, applying the kernel patches provided by upstream maintainers or distribution vendors is the only reliable way to remediate this vulnerability.