A high-severity use-after-free vulnerability in the Linux kernel vsock implementation can lead to system crashes and denial of service.

The issue is a race condition where the RX worker continues to refill the RX queue after the virtqueues have been deleted during the teardown process. This results in a use-after-free scenario when the worker attempts to access freed memory.

The CVSS score of 7.8 reflects the high risk of system instability. In virtualized environments using virtio vsock, this vulnerability can be leveraged to cause a denial of service, impacting the reliability of virtual machines and the host system.

Immediate Action: Update the Linux kernel to the specified fixed versions (5.10.265, 5.15.216, 6.1.183, 6.6.152) or later.

Proactive Monitoring: Monitor system logs for KASAN slab-use-after-free errors or unexpected kernel panics occurring during the shutdown or removal of vsock devices.

Compensating Controls: Limit access to vsock configurations and virtualized hardware management to strictly authorized administrative users.

Public Exploit Available: No

Organizations utilizing virtualized infrastructures with virtio vsock should prioritize this patch. Applying the update will resolve the race condition and prevent the associated use-after-free, ensuring the continued stability and availability of the virtualized environment.