A high-severity use-after-free flaw in the Linux kernel SLIP implementation poses a significant risk of local privilege escalation and system instability.

The vulnerability arises from improper handling of network device pointers within the SLIP driver, specifically in the sl_sync function. Because the driver stores bare pointers without reference counting, a local attacker with low privileges can trigger a race condition that leads to a use-after-free scenario when a device is being destroyed.

Successful exploitation of this flaw allows a local, authenticated user to gain elevated privileges or cause a kernel panic, leading to system downtime. Given the CVSS score of 7.8, this vulnerability represents a substantial threat to system integrity and availability, particularly in multi-user environments or containerized hosts where local isolation is critical.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected system crashes that occur during network interface configuration or teardown.

Compensating Controls: If patching is not immediately feasible, restrict access to the SLIP driver module by blacklisting it if it is not required for system operations.

Public Exploit Available: No

This vulnerability is a serious local security risk that could facilitate full system compromise. Administrators should prioritize kernel updates across all affected infrastructure, particularly on systems where untrusted local users have shell access. Apply the recommended kernel patches as soon as they are integrated into your distribution's stable update channel.