A use-after-free vulnerability in the Linux kernel bpf sockmap component, triggered by race conditions during socket redirection, could lead to local privilege escalation or system instability.

This is a use-after-free flaw within the bpf sockmap subsystem, specifically occurring in the sk_psock_msg_verdict and tcp_bpf_send_verdict functions. An attacker can trigger this condition by exploiting a race condition where a socket reference is prematurely released while another thread maintains a stale pointer, resulting in memory corruption.

The CVSS score of 8.4 reflects the high potential for system-level compromise. Successful exploitation could allow a local attacker to execute arbitrary code with kernel-level privileges, leading to a complete compromise of the host system, unauthorized data access, or persistent denial of service.

Immediate Action: Update your Linux kernel to the corrected versions: 5.10.265, 5.15.216, 6.1.183, or 6.6.152, depending on your current distribution branch.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults that occur during high-volume network traffic or heavy socket operations, as these may indicate attempted exploitation.

Compensating Controls: Restrict access to BPF-related functionality to trusted users only, as this significantly reduces the attack surface for vulnerabilities involving the bpf subsystem.

Public Exploit Available: Unknown.

Given the severity of potential kernel memory corruption, organizations should prioritize patching their Linux distributions as soon as upstream stable kernels become available in their repositories. Ensure that all production environments running affected kernel versions are scheduled for maintenance to apply these critical security updates.