A high-severity use-after-free vulnerability in the Linux kernel via-sdmmc driver allows a local authenticated attacker to potentially achieve code execution or system compromise.

The vulnerability occurs when the via-sdmmc driver fails during initialization, leaving the SD card-detect interrupt registered even after memory has been freed. An attacker with local access can trigger this condition, leading to a use-after-free scenario where the interrupt handler accesses invalid memory addresses.

Successful exploitation of this flaw allows a local user with low privileges to execute arbitrary code with elevated kernel permissions. This could result in a full system compromise, unauthorized data access, or persistent denial-of-service conditions. Given the CVSS score of 7.8, this represents a significant risk to the integrity and availability of affected systems.

Immediate Action: Update your Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or a later stable release to incorporate the necessary fix for the via-sdmmc driver.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected hardware initialization errors related to the via-sdmmc driver, which may indicate attempted exploitation.

Compensating Controls: Restrict access to the local system to trusted users only and implement kernel-level protections, such as KASLR and hardware-based memory protections, to increase the difficulty of successful exploitation.

Public Exploit Available: No (exploit_available: false)

This vulnerability presents a clear risk of local privilege escalation. System administrators should prioritize testing and deploying the provided kernel patches across all affected environments. Ensure that kernel updates are applied as part of standard maintenance cycles to mitigate the risk of local attackers leveraging this flaw to gain unauthorized control.