A high-severity race condition in the Linux kernel RDS TCP component could allow a local authenticated attacker to gain unauthorized access or cause system instability.

The RDS TCP module fails to maintain the RCU read-side lock throughout the execution of ipv6_chk_addr within rds_tcp_laddr_check. This allows an attacker with low-level local access to trigger a use-after-free scenario.

Exploitation of this vulnerability could lead to arbitrary code execution or a complete system crash. With a CVSS score of 7.8, this flaw represents a significant risk to the security posture of systems utilizing the RDS protocol.

Immediate Action: Apply the latest security updates from your distribution provider to upgrade the kernel to a patched version.

Proactive Monitoring: Review system audit logs for unauthorized access attempts or unusual kernel-level activity during network operations.

Compensating Controls: Disable the RDS protocol if it is not required for network operations to reduce the attack surface.

Public Exploit Available: No

Given the potential for privilege escalation and system compromise, immediate patching of the kernel is strongly recommended. Organizations should evaluate the necessity of the RDS protocol and disable it where feasible to minimize exposure.