A race condition in the Linux kernel AFS filesystem component can lead to a Use-After-Free vulnerability, potentially allowing a local attacker to cause system instability or gain elevated privileges.

This is a memory corruption vulnerability involving a Use-After-Free condition within the afs_make_call function. It requires an authenticated local user to trigger the race condition.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation allows a local user to crash the system, cause denial of service, or potentially execute arbitrary code with kernel-level privileges. This presents a critical risk to system integrity and service availability in environments relying on the AFS filesystem.

Immediate Action: Update the Linux kernel to version 6.18.44, 7.1.8, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages, which may indicate attempted exploitation of memory corruption flaws.

Compensating Controls: Restrict access to the system to only authorized users, as the exploit requires local access to the affected environment.

Public Exploit Available: No (unknown)

Given the potential for kernel-level compromise, administrators should prioritize patching the Linux kernel across all affected production systems. Applying the recommended updates is the only definitive way to eliminate this memory safety issue.