A use-after-free vulnerability in the Linux kernel perf subsystem could allow a local attacker to achieve privilege escalation or system instability.

This is a use-after-free flaw occurring within the perf mmap implementation. The vulnerability is triggered by a race condition where perf_mmap_close decrements the mmap count without holding the event mmap mutex, allowing a concurrent perf_mmap_rb operation to interfere, leading to the incorrect freeing of a ring buffer. The exploit requires a local, authenticated user account to trigger the race condition.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation allows a local user to compromise the confidentiality, integrity, and availability of the system. This could result in unauthorized administrative access, data theft, or a total system crash, necessitating immediate patching of kernel environments.

Immediate Action: Update the Linux kernel to version 6.18.52, 7.2.5, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops messages or unexpected segmentation faults in perf-related processes, which may indicate attempted exploitation.

Compensating Controls: Restrict access to the perf subsystem by limiting user privileges and ensuring that only trusted users have the capability to execute performance monitoring tools.

Public Exploit Available: No — exploit_available (false).

Given the potential for local privilege escalation, this vulnerability should be treated with high urgency in multi-user or shared hosting environments. Administrators must prioritize kernel updates to the specified fixed versions to ensure the race condition is neutralized. If immediate patching is not feasible, restrict access to performance profiling utilities to mitigate the attack surface.