A critical use-after-free vulnerability in the Linux kernel VXLAN implementation may allow a local attacker to achieve system compromise or denial of service.

The vulnerability exists in the vxlan_changelink function, which incorrectly arms an ageing timer on devices that are not currently running. This leads to a use-after-free condition when the device is freed while the timer remains queued, allowing the timer core to write to invalid memory.

The flaw carries a CVSS score of 8.8, reflecting its potential for severe impact on system integrity and availability. Because it involves a memory corruption primitive within the kernel, a successful exploit by a local attacker could lead to unauthorized privilege escalation or a complete system crash, resulting in significant operational downtime or data exposure.

Immediate Action: Apply the latest kernel security updates provided by your distribution vendor, specifically ensuring the kernel is at least version 5.10.265, 5.15.216, 6.1.183, or 6.6.152.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected "slab-use-after-free" bug reports, which may indicate attempted exploitation of kernel memory management flaws.

Compensating Controls: Restrict access to the system to authorized users only, as the vulnerability requires local access to the target machine to successfully trigger the flaw.

Public Exploit Available: Unknown

Given the critical severity and the potential for kernel-level memory corruption, administrators should prioritize patching as soon as vendor-supplied kernels become available. Testing and deploying these updates in staging environments followed by production is essential to mitigate the risk of local privilege escalation.