A high-severity memory management vulnerability in the Linux kernel could allow an authenticated local user to cause a system crash or potentially corrupt memory state.

The vulnerability exists in the __migrate_device_pages() function, which fails to refresh the folio mapping after calling folio_free_swap(). This allows the kernel to operate on stale mapping data with invalid reference accounting, requiring the attacker to have low-privileged local access to the system.

The exploitation of this vulnerability results in a kernel-level BUG, which typically causes a system crash or kernel panic. Given the CVSS score of 7.8, this represents a significant risk to system availability and stability. While the attack requires local access, successful exploitation in a multi-tenant or shared environment could lead to denial of service for all users on the affected host.

Immediate Action: Update the Linux kernel to version 7.2.4 or later, or apply the upstream patches associated with commits 8ffedc6573a665cdc31ebe47eae7b32b78d0df83 and 34a00895d032a414830d41106a09329ae6c251b6.

Proactive Monitoring: Monitor system logs for kernel BUG entries or unexpected reboots that may indicate an exploitation attempt.

Compensating Controls: Restrict access to the system to only authorized users, as the vulnerability requires local access to the kernel interface to trigger.

Public Exploit Available: Unknown

Organizations should prioritize patching affected Linux distributions to version 7.2.4 or higher to remediate this memory management flaw. Given the potential for system instability and kernel-level impact, testing and deployment of these updates should be conducted as part of standard patch management procedures to ensure ongoing system reliability.