A vulnerability in the Linux kernel KCM subsystem allows a local authenticated attacker to trigger kernel-level errors, potentially resulting in full system compromise.

The KCM strparser function fails to establish an RCU read-side critical section when executing BPF programs. This allows a local, authenticated attacker to trigger invalid memory operations or state inconsistencies within the kernel during BPF map access.

The vulnerability carries a CVSS score of 7.8, reflecting its high severity as it permits local privilege escalation and potential system-wide denial of service. If exploited, an attacker with low privileges could gain root access, bypass security boundaries, or crash the host system, leading to significant data loss or operational downtime.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, 6.6.157, or later immediately to incorporate the required RCU locking fix.

Proactive Monitoring: Monitor system logs for kernel warnings, specifically those referencing RCU lock violations or BPF program execution errors.

Compensating Controls: Restrict access to BPF-related system calls for non-privileged users, as this functionality is a prerequisite for triggering the flaw.

Public Exploit Available: Unknown

Given the potential for complete system compromise, administrators must prioritize patching the Linux kernel across all affected environments. Organizations should verify their kernel version against the provided fixed releases and perform rolling updates to ensure stability while mitigating the risk of local privilege escalation.