A use-after-free vulnerability in the Linux kernel pata_sl82c105 driver, identified as CVE-2026-80732, presents a high risk for local privilege escalation and system compromise.

This is a use-after-free vulnerability within the pata_sl82c105 driver caused by improper handling of PCI device references. An attacker with local access can trigger this flaw by exploiting the driver's incorrect access to a cached revision field after the corresponding PCI device has been released.

Successful exploitation of this vulnerability allows a local user to gain unauthorized elevated privileges or cause a kernel panic, leading to system downtime. Given the CVSS score of 7.8, this flaw is classified as high severity, as it directly impacts the confidentiality, integrity, and availability of the underlying host system.

Immediate Action: Update the Linux kernel to the corrected versions (5.10.265, 5.15.216, 6.1.183, 6.6.152, or newer) as provided by your distribution maintainer.

Proactive Monitoring: Monitor system logs for unexpected kernel oops or crash reports that may indicate an attempt to trigger a use-after-free condition.

Compensating Controls: Restrict local access to the system to only trusted users, as this vulnerability requires local presence to execute the attack vector.

Public Exploit Available: Unknown.

While this vulnerability requires local access, its potential to grant full system control makes it a high-priority item for server and workstation maintenance. Security teams should prioritize patching cycles for all affected Linux environments, specifically targeting the kernel versions identified in the remediation section to eliminate the vulnerability at the source.