A high-severity use-after-free vulnerability exists in the Linux kernel MCTP subsystem, which could allow a local unprivileged attacker to cause system instability or potential code execution.

This is a use-after-free vulnerability within the net/mctp network stack. The flaw occurs because the system fails to hold a proper reference to the route device during lookup, allowing an unprivileged local user to trigger a memory access after the device has been freed.

The vulnerability carries a CVSS score of 7.8, indicating a high risk to system integrity and availability. Because the exploit can be triggered by an unprivileged local user, it poses a significant threat to multi-tenant environments or shared server infrastructures. Successful exploitation may result in kernel panics, service disruption, or unauthorized memory access, potentially leading to privilege escalation.

Immediate Action: Administrators must update their Linux kernel to version 7.2.4 or later, or apply the relevant upstream patches identified in the Linux stable repository.

Proactive Monitoring: Monitor system logs for kernel panic events or KASAN-related bug reports that may indicate an exploitation attempt targeting the MCTP subsystem.

Compensating Controls: Restrict access to the system to authorized users only, and limit the usage of AF_MCTP sockets if they are not required for system operations.

Public Exploit Available: No

Given the potential for local privilege escalation and system instability, patching this vulnerability is a high priority for all Linux-based systems utilizing the MCTP protocol. System administrators should verify their current kernel version and coordinate an update to 7.2.4 or higher as part of their next maintenance cycle to eliminate this exposure.