A high-severity use-after-free vulnerability in the Linux kernel HID sony driver could allow an attacker to trigger memory corruption or system instability.

This is a memory management flaw occurring when the sony_input_configured function fails. An attacker with adjacent network access can trigger a use-after-free condition by causing a probe failure, leading to the traversal of freed memory when processing subsequent device controllers.

The exploitation of this vulnerability could lead to system crashes or potential arbitrary code execution within the kernel context. Given the CVSS score of 8.8, this flaw represents a significant risk to system integrity and availability, particularly for environments relying on HID device connectivity.

Immediate Action: Update the Linux kernel to version 6.18.51, 7.2.5, or later, as provided by the official stable kernel repositories.

Proactive Monitoring: Monitor system logs for kernel oops or instability patterns related to HID device registration failures.

Compensating Controls: Restrict access to physical or wireless HID device interfaces where possible to limit the potential for an attacker to trigger the probe failure.

Public Exploit Available: Unknown

This vulnerability presents a high risk to kernel stability and security. It is critical that administrators prioritize applying the official kernel patches to affected systems to prevent potential exploitation of the use-after-free condition.