A use-after-free vulnerability in the Linux kernel SLIP driver, caused by improper race condition handling during tty hangup, poses a significant risk to local system integrity.

This vulnerability is a slab-use-after-free read condition occurring in the slip_receive_buf function. It requires an attacker to possess local, authenticated access to the system to trigger a race condition against a tty hangup event, resulting in memory corruption.

Successful exploitation of this kernel-level vulnerability allows a local attacker to execute arbitrary code with elevated privileges or crash the system. Given the CVSS score of 7.8, this flaw represents a high-severity risk, particularly in multi-user environments or shared hosting platforms where malicious local actors could compromise the entire host operating system.

Immediate Action: Update the Linux kernel to versions 6.1.188, 6.6.157, 6.12.110, or 6.18.52 or newer, depending on your distribution branch.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults that may indicate an attempted exploitation of the SLIP driver or other tty-related subsystems.

Compensating Controls: Restrict access to serial line IP (SLIP) functionality if it is not required for system operations, and limit user access to sensitive tty devices via strict permission controls.

Public Exploit Available: Unknown.

Organizations should prioritize patching affected Linux distributions as part of their regular kernel maintenance cycle. Because this vulnerability allows for potential privilege escalation from a local user account, it is imperative to apply the provided kernel updates as soon as they become available for your specific distribution to mitigate the risk of local system compromise.