A critical use-after-free vulnerability in the Linux kernel IPv6 stack could lead to system crashes or arbitrary code execution via network traffic.

The flaw exists in the fib6_rule_suppress function, which fails to clear the reference to a route after it has been suppressed. This results in the kernel reusing a released route pointer, creating a use-after-free condition that can be triggered by unauthenticated network traffic.

With a CVSS score of 9.8, this vulnerability is critical. An attacker could potentially leverage this flaw to trigger remote code execution, cause widespread system instability, or bypass network security controls, leading to total system compromise and data exfiltration.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.151, or newer immediately.

Proactive Monitoring: Monitor network traffic for anomalous patterns and review system logs for kernel panic events related to the IPv6 stack or route lookups.

Compensating Controls: If immediate patching is not feasible, implement network-level filtering to block malformed or unexpected IPv6 packets that might trigger complex route suppression scenarios.

Public Exploit Available: Unknown

The severity and remote attack vector of this vulnerability necessitate an urgent response. Security teams should expedite the deployment of patched kernel versions to all exposed systems to prevent potential exploitation of the IPv6 networking stack.