A use-after-free flaw in the Linux kernel vsock virtio implementation poses a significant risk of system instability and potential local privilege escalation.

The vulnerability exists in the virtio_vsock_remove function, which fails to account for task dependencies when flushing work items. This race condition allows an attacker to trigger a use-after-free scenario, as rx_work can be queued after the driver has initiated the removal process.

Successful exploitation of this vulnerability can lead to kernel-level memory corruption, resulting in a denial-of-service or potential local privilege escalation. Given the CVSS score of 8.4, this vulnerability is classified as High severity, as it directly compromises the integrity and availability of the host operating system.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later to incorporate the required dependency flushing logic.

Proactive Monitoring: Monitor kernel logs for KASAN reports or unexpected system reboots that may indicate memory corruption events.

Compensating Controls: Restrict local user access to the system, as the exploit requires local execution to trigger the race condition within the virtio driver.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to kernel stability. Administrators should prioritize patching affected Linux distributions as part of their regular maintenance cycle to ensure the fix is applied, thereby eliminating the race condition and preventing potential memory corruption.