A critical use-after-free vulnerability in the Linux kernel allows unauthenticated remote attackers to potentially achieve arbitrary code execution or system crashes.

The flaw occurs within the __skb_udp_tunnel_segment function, where the kernel captures a UDP header pointer before ensuring the tunnel header is present in the skb head. If a memory reallocation occurs during the pull operation, the pointer becomes invalid, leading to a use-after-free condition that can be triggered by an unauthenticated attacker.

The vulnerability carries a CVSS score of 10.0, indicating the highest level of severity. Successful exploitation allows an attacker to compromise the integrity, confidentiality, and availability of the host system. This could lead to a complete system compromise or recurring service outages, posing a significant risk to any infrastructure relying on Linux-based networking or tunneling services.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.152, or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panic events or unexplained segmentation faults that may indicate exploitation attempts.

Compensating Controls: Implement network-level filtering to restrict traffic to known-good endpoints and utilize kernel self-protection features to mitigate the impact of memory corruption vulnerabilities.

Public Exploit Available: Unknown

Given the critical CVSS score and the fundamental nature of the affected component, organizations should prioritize patching as part of their next maintenance cycle. System administrators must verify their kernel versions against the fixed releases specified and coordinate reboots to apply the security updates effectively.