A critical use-after-free vulnerability in the Linux kernel IPVS subsystem could lead to system compromise or denial of service.

The vulnerability exists in the IPVS (IP Virtual Server) component where synced connections incorrectly inherit the IP_VS_CONN_F_ONE_PACKET flag. This causes the kernel to improperly manage memory for hashed connections, leading to a condition where stale hash nodes reference freed memory structures.

The CVSS score of 9.8 reflects the high severity of this flaw, as it allows unauthenticated, remote attackers to potentially corrupt kernel memory. Successful exploitation may result in a complete system crash (Denial of Service) or provide a pathway for an attacker to gain elevated privileges and execute arbitrary code on the underlying host, leading to full system compromise.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.151, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panic events or unusual segmentation faults that may indicate attempts to trigger memory corruption within the IPVS module.

Compensating Controls: If patching is not immediately feasible, restrict access to the IPVS service to trusted network segments to limit the attack surface available to potential remote adversaries.

Public Exploit Available: Unknown

Given the critical CVSS severity score of 9.8 and the fundamental nature of the Linux kernel, organizations should prioritize testing and deploying the provided kernel patches as part of their next maintenance cycle. Failure to address this vulnerability exposes critical infrastructure to potential remote exploitation, which could result in severe operational disruption or loss of system integrity.