A memory corruption vulnerability in the Linux kernel network subsystem allows local authenticated attackers to compromise system integrity and confidentiality.

This vulnerability is a race condition or improper state management issue within the skbuff network handling code. Specifically, the kernel incorrectly modifies shared zerocopy state in cloned socket buffers, which allows an attacker to manipulate data that is still in flight, requiring low-level local access.

Successful exploitation of this vulnerability permits a local user to achieve high-impact consequences, including unauthorized data access and potential system crashes. Given the CVSS score of 7.8, this flaw represents a significant risk to the confidentiality and integrity of multi-user systems or containerized environments where users share the same kernel instance.

Immediate Action: Update the Linux kernel to one of the patched versions: 6.1.188, 5.15.221, 5.10.270, 6.12.109, 6.18.50, 7.2.4, or later depending on your distribution branch.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts related to networking components, specifically within environments utilizing Open vSwitch.

Compensating Controls: Restrict local access to the system, ensuring only trusted users have the ability to execute code locally, as this vulnerability cannot be reached by unauthenticated remote attackers.

Public Exploit Available: No (exploit_available: false)

Organizations should prioritize patching this kernel vulnerability, particularly in environments hosting virtualized network functions or using Open vSwitch. While the requirement for local access limits the immediate threat landscape, the potential for kernel-level compromise necessitates prompt remediation to maintain system security and stability.