A critical use-after-free vulnerability in the Linux kernel SUNRPC component allows unauthenticated attackers to potentially achieve remote code execution or system instability.

This is a race condition vulnerability within the SUNRPC subsystem regarding TLS handshake callbacks. An unauthenticated attacker can trigger this flaw by causing a timeout or signal during a handshake request, leading to premature memory release of the transport structure.

The vulnerability carries a CVSS score of 9.8, indicating the highest level of severity. Successful exploitation could allow an attacker to execute arbitrary code with kernel-level privileges, leading to a complete compromise of the affected server, loss of data integrity, and significant operational disruption.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, or 7.2.4, which contain the necessary fixes for this race condition.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults related to the SUNRPC subsystem, or unexplained process crashes that might indicate exploitation attempts.

Compensating Controls: Restrict network access to services utilizing RPC-over-TLS to trusted network segments to reduce the surface area available to potential attackers.

Public Exploit Available: Unknown

Given the critical nature of this kernel-level vulnerability, security teams should prioritize testing and deploying the provided kernel patches. Organizations running services that utilize Linux SUNRPC-over-TLS should treat this as a high-urgency update to prevent potential remote exploitation.