A critical use-after-free vulnerability in the Linux kernel interconnect framework poses a severe risk of local privilege escalation and system instability.

This flaw exists in the interconnect subsystem where an error handling path in icc_get and of_icc_get_by_index incorrectly frees a path object while it remains linked in node request lists. A low-privileged local attacker can trigger this state to cause a use-after-free, which may lead to arbitrary code execution or kernel panic.

The vulnerability carries a CVSS score of 7.8, reflecting its potential for complete system compromise. Successful exploitation allows a local user to escalate privileges, potentially leading to unauthorized data access, system-wide disruption, or total control of the affected host. Given the nature of kernel-level flaws, the impact on business operations and data integrity is significant.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later to incorporate the necessary teardown function fix.

Proactive Monitoring: Monitor system logs for kernel oops or panic events, particularly those referencing memory access violations or slab-use-after-free errors.

Compensating Controls: Restrict access to system interfaces and debugfs to minimize the attack surface for local users who might attempt to trigger this race condition.

Public Exploit Available: Unknown

Organizations should prioritize patching this vulnerability as part of their standard kernel maintenance cycle. Because this flaw resides in the kernel, it represents a direct threat to the integrity of the entire operating system environment. Applying the kernel update is the only definitive way to eliminate the risk posed by the dangling pointers in the interconnect node lists.