A high-severity use-after-free vulnerability exists in the Linux kernel NFS implementation that could lead to system instability or arbitrary code execution.

The vulnerability arises in the nfsd service thread management where a per-network namespace queue is freed while asynchronous callbacks are still attempting to access it. This use-after-free condition is triggered during specific teardown operations and does not require user authentication to reach the vulnerable code path.

The flaw carries a CVSS score of 8.1, indicating a high risk to system integrity and availability. Successful exploitation could result in kernel-level memory corruption, potentially leading to unauthorized system access, data compromise, or a complete system crash, which would disrupt business operations relying on NFS services.

Immediate Action: Update the Linux kernel to version 6.18.51, 7.2.4, or later versions where the disposal state is correctly inlined into the nfsd_net structure.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults, particularly during service restarts or network namespace teardown events.

Compensating Controls: If patching is delayed, restrict access to the NFS service to trusted internal networks only to minimize the risk of external actors triggering the vulnerable code path.

Public Exploit Available: No

Given the potential for system-wide impact and the high CVSS severity, administrators should prioritize updating kernel packages across all affected environments. Testing the patch in a staging environment is advised to ensure compatibility with existing NFS configurations before deploying to production systems.