A vulnerability in the Linux kernel nfsd module allows a local authenticated attacker to trigger potential memory corruption and system compromise.

The vulnerability exists due to an incorrect initialization order in the nfsd module, where debugfs files are created before slab allocation occurs. If slab allocation fails, the error path fails to properly clean up debugfs state, leaving stale pointers that reference freed memory. The CVSS vector (AV:L/AC:L/PR:L) confirms that this requires local access with low privileges to trigger.

The potential for memory corruption and use-after-free conditions presents a significant risk to system stability and security. A successful exploit could lead to unauthorized privilege escalation, sensitive data disclosure, or a kernel panic resulting in denial of service. Given the CVSS score of 7.8, this flaw is categorized as high severity due to its potential to compromise the integrity of the host operating system.

Immediate Action: Administrators must update the Linux kernel to version 6.18.50, 7.2.4, or later versions where the initialization sequence and cleanup paths have been corrected.

Proactive Monitoring: Security teams should monitor system logs for kernel oops or unexpected system crashes that might indicate memory corruption attempts.

Compensating Controls: Ensure that system access is strictly controlled, adhering to the principle of least privilege to prevent unauthorized users from interacting with low-level kernel interfaces.

Public Exploit Available: Unknown

This kernel vulnerability represents a high-severity risk to system integrity. Organizations running affected versions of the Linux kernel should prioritize testing and deploying the provided patches immediately. Failure to address this flaw could allow local users to escalate privileges or cause system-wide instability.