A critical race condition within the Linux kernel SUNRPC subsystem could allow an unauthenticated attacker to cause system instability or potential code execution.

This vulnerability is a race condition occurring in the SUNRPC backchannel during the teardown of the NFS callback service. An unauthenticated attacker can exploit this flaw by triggering specific race conditions during service shutdown, leading to memory leaks or use-after-free scenarios.

The vulnerability carries a CVSS score of 9.8, indicating a critical risk to system availability and integrity. A successful exploit could result in full system compromise, unauthorized data access, or persistent denial of service, significantly impacting critical infrastructure relying on NFS services.

Immediate Action: Update the Linux kernel to version 7.2.4 or later to apply the necessary fix for the SUNRPC backchannel teardown process.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected process crashes associated with nfsd or RPC services.

Compensating Controls: Restrict network access to NFS services to trusted internal subnets using firewalls to minimize the attack surface until kernel patches can be applied.

Public Exploit Available: Unknown

Given the critical CVSS severity and the fundamental nature of the Linux kernel, organizations should prioritize patching as part of their next scheduled maintenance cycle. Ensure that all downstream distributions and custom kernels are verified against the fixed version 7.2.4 to eliminate this exposure.