A critical memory management flaw in the Linux kernel rtase driver could result in system instability or potential code execution due to a double free condition.

This is a double free vulnerability located within the rtase_start_xmit function. When a DMA mapping failure occurs after fragments have been mapped, the error handling path incorrectly frees the socket buffer (skb) twice, which can lead to severe memory corruption.

The CVSS score of 9.8 reflects the high potential for system compromise. A successful exploitation of this memory corruption flaw could lead to a denial of service (system crash) or potentially allow an unauthenticated remote attacker to execute arbitrary code with kernel-level privileges. Such an outcome would result in a total loss of system integrity and availability for critical infrastructure.

Immediate Action: Update the Linux kernel to version 6.12.103, 6.18.44, 7.1.8, or later, depending on your current branch.

Proactive Monitoring: Monitor system logs for kernel panic events or memory-related segmentation faults that may indicate an exploitation attempt.

Compensating Controls: Ensure that network-facing systems are shielded by robust perimeter security to limit exposure, although patching the kernel remains the only effective mitigation for this flaw.

Public Exploit Available: Unknown.

Given the critical nature of kernel-level vulnerabilities, administrators must prioritize patching affected systems. Update the Linux kernel to the specified fixed versions as soon as they become available in your distribution repositories to eliminate the risk of memory corruption and potential system compromise.