A critical use-after-free vulnerability in the Linux kernel MPLS stack poses a significant risk of system instability or arbitrary code execution.

The vulnerability exists in the mpls_select_multipath function, where a pointer to the MPLS header becomes invalid after a pskb_may_pull operation triggers memory reallocation. This leads to a use-after-free condition when the kernel subsequently attempts to access the freed memory, which can be triggered by unauthenticated network traffic.

The vulnerability carries a CVSS score of 9.8, reflecting its potential for full system compromise. Successful exploitation could lead to a kernel panic resulting in denial of service, or potentially allow an attacker to execute arbitrary code with kernel-level privileges, leading to complete data exfiltration or total system control.

Immediate Action: Update the Linux kernel to the versions specified in the OSV advisory (5.10.270, 5.15.221, 6.1.188, 6.6.157 or later) as soon as possible.

Proactive Monitoring: Monitor system logs for kernel oops or KASAN reports that may indicate memory corruption or use-after-free conditions.

Compensating Controls: Restrict incoming MPLS traffic at the network perimeter or via firewall rules if MPLS routing is not strictly required for business operations.

Public Exploit Available: No (exploit_available: unknown)

Given the critical nature of this kernel-level memory corruption flaw, organizations should prioritize patching affected systems in their next maintenance cycle. The potential for kernel-level code execution necessitates immediate attention for all internet-facing systems that handle MPLS traffic.