A race condition in the Linux kernel netfilter component allows unauthenticated attackers to trigger memory corruption, potentially leading to remote code execution or system instability.

The vulnerability exists due to incorrect tuple ordering during flowtable updates, where the garbage collector can free a flow while it is still being initialized. This creates a race condition that results in a slab use-after-free vulnerability, which can be triggered by an unauthenticated attacker.

The CVSS score of 9.8 reflects the critical nature of this flaw, as it allows for unauthenticated remote exploitation. Successful exploitation can lead to full system compromise, data exfiltration, or complete service disruption, posing a severe risk to any infrastructure relying on the affected Linux kernel versions.

Immediate Action: Update the Linux kernel to version 5.10.266, 5.15.217, 6.1.184, 6.6.153, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel-related crashes or KASAN-generated error reports that indicate memory corruption or slab-use-after-free events.

Compensating Controls: While specific network-level mitigations are difficult, restricting access to exposed network services and ensuring that systems are running with kernel-level protections (such as hardened memory allocators) can help reduce the window of opportunity.

Public Exploit Available: Unknown

Given the critical nature of this kernel-level vulnerability and the potential for complete system compromise, organizations must prioritize patching affected systems. Administrators should verify their kernel versions immediately and apply the necessary security updates to eliminate this race condition and ensure system integrity.