A critical use-after-free vulnerability exists in the Linux kernel nfsd component that could allow a local authenticated attacker to compromise system integrity and availability.

The vulnerability resides in how the nfsd component handles vmalloc buffers for NFSv4 compound operations. A race condition occurs when the rpc_status netlink dumpit operation reads from a buffer that is concurrently freed, leading to a use-after-free condition that requires low-privileged local access to trigger.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation could allow a local attacker to escalate privileges, cause kernel panics resulting in denial of service, or potentially execute arbitrary code with elevated permissions. This poses a significant threat to the confidentiality, integrity, and availability of any system running the affected Linux kernel, particularly those acting as NFS servers.

Immediate Action: System administrators should update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later, depending on the specific distribution branch in use.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected system crashes that might indicate an exploitation attempt against the nfsd subsystem.

Compensating Controls: Restrict access to the system to authorized users only, as the vulnerability requires local access to the target machine to successfully trigger the race condition.

Public Exploit Available: No (exploit_available: false)

Given the potential for privilege escalation and system compromise, this vulnerability should be prioritized for patching in environments where untrusted local users have access. Administrators are advised to verify their kernel version and apply the appropriate vendor-supplied patch as soon as it becomes available through their respective distribution's update channels.