A use-after-free vulnerability in the Linux kernel route4 classifier presents a high risk for local privilege escalation and system instability.

The route4 classifier contains a race condition between the reader and writer functions during fastmap cache operations, allowing a local user with low privileges to access freed memory after a filter is unlinked.

Successful exploitation of this vulnerability allows a local attacker to achieve high impact on confidentiality, integrity, and availability. By triggering memory corruption, an attacker could potentially escalate privileges or cause a kernel panic, leading to unauthorized system access or unexpected downtime. Given the CVSS score of 7.8, this flaw represents a significant risk to the security posture of any environment utilizing affected kernel versions.

Immediate Action: Update the Linux kernel to the corrected versions (5.10.265, 5.15.216, 6.1.183, or 6.6.152) or apply the upstream patches provided by the distribution maintainer.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation fault errors, which may indicate attempted exploitation of kernel memory vulnerabilities.

Compensating Controls: Restrict access to the system to trusted users only, as this vulnerability requires local access to the affected environment to execute the race condition.

Public Exploit Available: Unknown

This vulnerability highlights the ongoing risk associated with memory management errors in complex kernel subsystems. Organizations should prioritize updating their Linux kernels to the specified fixed versions to eliminate the underlying race condition. Failure to patch may leave systems vulnerable to local attacks that could compromise the entire host.