A critical memory corruption vulnerability exists in the Linux kernel NFSv4.1 subsystem that could allow an unauthenticated attacker to trigger system instability or potential code execution.

The vulnerability stems from an improper memory allocation in the decode_cb_sequence_args function, where referring call lists are not initialized. Because the system may pass stale slab contents to a free operation, an unauthenticated remote attacker could trigger undefined behavior or memory corruption.

The CVSS score of 9.8 reflects the high potential for system compromise. Successful exploitation could lead to a kernel panic, resulting in significant service downtime, or potentially allow an attacker to achieve arbitrary code execution within the kernel context. This poses a severe risk to data integrity and system availability for any environment utilizing NFSv4.1 services.

Immediate Action: Update the Linux kernel to version 7.2.6 or later to ensure the memory allocation is correctly initialized using kzalloc.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults that may indicate attempts to trigger this memory corruption.

Compensating Controls: If patching is not immediately feasible, restrict access to NFSv4.1 services to trusted networks and implement network-level egress filtering to prevent potential callbacks from malicious sources.

Public Exploit Available: Unknown

Given the critical severity and the potential for kernel-level impact, administrators should prioritize updating affected Linux systems to the patched version. Ensuring that the kernel correctly handles memory initialization for NFSv4.1 callbacks is essential to maintaining system stability and preventing potential security exploits.