A critical use-after-free vulnerability exists in the Linux kernel NFSD subsystem, potentially allowing unauthenticated remote attackers to achieve arbitrary code execution or cause system crashes.

The flaw occurs within the NFSD delegation revocation process, where a race condition allows a delegation to be processed after the owning nfs4_client has been freed. This unauthenticated vulnerability allows an attacker to manipulate memory states, leading to a use-after-free condition.

The exploitation of this vulnerability poses a severe risk to infrastructure stability and data integrity. Given the CVSS score of 9.8, an attacker could potentially execute arbitrary code with kernel-level privileges, leading to full system compromise, unauthorized data access, or denial of service across NFS-enabled environments.

Immediate Action: Update the Linux kernel to version 6.18.51, 7.2.4, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel panics, unexpected reboots, or suspicious NFSD traffic patterns that may indicate attempts to trigger race conditions.

Compensating Controls: Restrict access to the NFS service to trusted network segments and implement network-level filtering to minimize exposure of the NFSD interface to untrusted sources.

Public Exploit Available: Unknown

Due to the critical nature of this vulnerability and the potential for full system compromise, administrators should prioritize patching the Linux kernel immediately. Organizations relying on NFS for critical storage services should ensure that kernel updates are tested and deployed in accordance with their vulnerability management policies to mitigate the risk of remote code execution.