A use-after-free vulnerability in the Linux kernel sunrpc subsystem could allow a local authenticated attacker to trigger memory corruption or achieve code execution.

This is a use-after-free vulnerability occurring when the sunrpc subsystem prematurely frees memory buffers before an RCU grace period concludes. An authenticated local user can trigger this race condition by inducing specific RPC operations during thread termination, leading to a dereference of invalid memory.

The exploitation of this vulnerability could lead to a local privilege escalation or complete system compromise. Because the Linux kernel manages low level system resources, a successful exploit provides an attacker with high levels of control over the host, potentially resulting in data exfiltration or total service unavailability. The CVSS score of 7.8 confirms that while local access is required, the resulting impact on confidentiality, integrity, and availability is high.

Immediate Action: Apply the vendor-provided security updates to the Linux kernel, ensuring the system is running version 6.18.50, 7.2.4, or later.

Proactive Monitoring: Monitor system logs for kernel panics or repeated segmentation faults that may indicate an attempt to trigger memory corruption.

Compensating Controls: Restrict local shell access to authorized personnel only, as the vulnerability requires a local authenticated user to trigger the race condition.

Public Exploit Available: Unknown

Given the potential for high impact and the fundamental nature of the Linux kernel, this vulnerability should be prioritized for patching during the next standard maintenance cycle. System administrators should verify their current kernel versions against the fixed releases and coordinate reboots to apply the updates, as kernel patches cannot be fully applied without restarting the affected systems.