A critical use-after-free vulnerability exists in the Linux kernel block layer, which could lead to system instability or arbitrary code execution.

The flaw occurs in the disk release path where a timeout timer remains active after a failed disk probe, causing the kernel to reference freed memory. This is an unauthenticated, low-complexity vulnerability that triggers when specific NVMe device initialization failures occur.

The vulnerability carries a CVSS score of 9.8, reflecting its potential for severe impact on system integrity and availability. Successful exploitation of this use-after-free condition can result in kernel panics, causing significant service downtime, or potentially allow an attacker to gain unauthorized control over the affected system.

Immediate Action: Update the Linux kernel to version 6.1.184, 6.6.153, 6.12.105, or 6.18.46, depending on your distribution branch.

Proactive Monitoring: Monitor system logs for kernel BUG reports, specifically KASAN (Kernel Address Sanitizer) violations or slab-use-after-free errors related to the block layer or NVMe drivers.

Compensating Controls: Ensure kernel hardening features such as KASAN and slab poisoning are enabled in development and staging environments to detect such memory corruption patterns early.

Public Exploit Available: Unknown

Given the critical nature of kernel-level vulnerabilities, organizations should prioritize patching affected Linux distributions as part of their next maintenance cycle. Failure to address this flaw could leave systems exposed to memory corruption attacks that bypass standard application-level security controls.