A critical use-after-free vulnerability in the Linux kernel NFS implementation poses a severe risk of system instability, data corruption, or potential remote code execution.

The vulnerability exists in the nfsd4_sequence function, which fails to adequately validate session slots during a shrink operation. This allows an unauthenticated attacker to trigger the freeing of a session slot that is currently in use, resulting in a dangling pointer that can be leveraged to corrupt kernel memory.

The CVSS score of 9.8 reflects the critical nature of this flaw, as it allows for unauthenticated remote exploitation of the kernel. Successful exploitation can lead to a complete system crash (Denial of Service), unauthorized data access, or the execution of arbitrary code with kernel-level privileges, which would result in a total compromise of the affected server and any data hosted within the NFS environment.

Immediate Action: Update the Linux kernel to version 6.18.50, 7.2.4, or a later stable release that incorporates the upstream fix commits.

Proactive Monitoring: Monitor system logs for kernel panics, unexpected reboots, or segmentation faults specifically related to NFS service processes.

Compensating Controls: If patching is delayed, restrict network access to the NFS service to trusted IP addresses only, and implement network-level filtering to block malformed NFS traffic where possible.

Public Exploit Available: Unknown.

Given the critical severity of this kernel-level vulnerability, organizations should prioritize patching as part of their next maintenance cycle. Because this flaw resides in the core networking stack, the potential for remote exploitation is high, and immediate remediation is strongly advised to prevent system compromise.