A use after free vulnerability in the Linux kernel USB gadget driver could allow a local attacker with low privileges to trigger memory corruption or potentially achieve arbitrary code execution.

This vulnerability occurs in the USB gadget audio driver because g_audio_cleanup prematurely frees the sound card context while ALSA control elements remain accessible to userspace. A local attacker with low privileges can trigger a use after free condition by interacting with these stale file descriptors, leading to memory corruption.

The flaw carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation could allow an attacker to crash the system or potentially execute arbitrary code with kernel level privileges, resulting in a complete loss of system integrity and availability.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults related to the usb_audio module or ALSA sound subsystem.

Compensating Controls: Restrict access to USB gadget interfaces and device nodes to trusted users only, as the attack vector requires local access to the affected hardware interface.

Public Exploit Available: Unknown

Given the potential for privilege escalation and the critical nature of kernel vulnerabilities, administrators should prioritize patching affected systems. Implement the provided kernel updates as part of the next scheduled maintenance window to mitigate the risk of local memory corruption attacks.