A use-after-free vulnerability in the Linux kernel eventfs subsystem poses a high risk of privilege escalation and system instability for affected local users.

The vulnerability exists in the eventfs_remove_rec function due to improper handling of list iteration during recursive child removal. An attacker with local access and low privileges can trigger a use-after-free condition by manipulating the eventfs_mutex, which fails to prevent the child from being freed while referenced.

Successful exploitation of this vulnerability allows a local user to gain elevated privileges or force a kernel panic, resulting in a complete system compromise or denial of service. With a CVSS score of 7.8, this flaw represents a significant risk to host integrity and availability, particularly in multi-tenant or shared computing environments where local user access is permitted.

Immediate Action: Apply the latest security patches provided by your Linux distribution maintainer, ensuring the kernel is updated to at least version 6.6.152, 6.12.104, 6.18.45, or 7.1.9.

Proactive Monitoring: Monitor system logs for frequent or unexpected kernel panics and instability, which may indicate attempted exploitation of kernel-level memory corruption.

Compensating Controls: Restrict local shell access to untrusted users and enforce the principle of least privilege to minimize the number of accounts capable of interacting with the kernel interfaces.

Public Exploit Available: Unknown

The severity of this kernel-level memory corruption vulnerability necessitates prompt attention. Organizations should prioritize updating their Linux kernels to the identified fixed versions to prevent potential local privilege escalation. Given that kernel vulnerabilities often serve as a foundation for further lateral movement within a network, immediate patching remains the most effective defense.