A high-severity use-after-free vulnerability in the Linux kernel Shared Memory Communications (SMC) implementation poses a significant risk of local privilege escalation and system instability.

This vulnerability is a use-after-free flaw within the net/smc subsystem, triggered when a connection is freed while the link group is being terminated. A local authenticated attacker can exploit this race condition to cause the kernel to dereference freed memory, potentially leading to privilege escalation or kernel panic.

The exploitation of this vulnerability allows a local user with low privileges to gain elevated access or crash the operating system, resulting in service disruption. Given the CVSS score of 7.8, the ability to achieve high impact across confidentiality, integrity, and availability within the kernel space makes this a critical security concern for any environment utilizing the SMC subsystem.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages, particularly those referencing the net/smc module, which may indicate attempted exploitation.

Compensating Controls: If patching is not immediately feasible, consider disabling the SMC subsystem if it is not required for network operations to reduce the attack surface.

Public Exploit Available: No

This vulnerability represents a significant risk to the integrity of the Linux kernel. Administrators should prioritize applying the relevant security patches provided by their Linux distribution maintainers as soon as they become available. Testing and deployment of these updates are essential to prevent local privilege escalation and maintain system stability.