A critical use-after-free vulnerability in the Linux kernel NFSD subsystem could allow an unauthenticated attacker to trigger memory corruption or achieve remote code execution.

This is a use-after-free vulnerability (CWE-416) within the NFS daemon (NFSD) component. It occurs when the kernel incorrectly manages list pointers during a lock-drop window in the ssc_expire_umount function, allowing a concurrent thread to free memory that is subsequently dereferenced.

The vulnerability carries a CVSS score of 9.8, reflecting its potential for full system compromise. Successful exploitation could lead to unauthorized access to sensitive data, total system instability through kernel panics, or the execution of arbitrary code with kernel-level privileges, resulting in significant operational and security risks for affected infrastructure.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, 6.6.157, or the latest available stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unexpected kernel oops or panic events, which may indicate attempted exploitation of memory management flaws in the NFSD subsystem.

Compensating Controls: If patching is not immediately feasible, restrict access to the NFS service to trusted network segments and disable the inter-server copy functionality if it is not strictly required for business operations.

Public Exploit Available: Unknown.

Given the critical nature of this kernel-level vulnerability and the potential for remote code execution, organizations should prioritize the deployment of vendor-supplied kernel updates. Ensure that all systems running the NFS daemon are patched according to the specified version requirements to eliminate the risk of kernel memory corruption.