A critical use after free vulnerability in the Linux kernel NFSv4 client allows for potential memory corruption and unauthorized system impact.

The flaw occurs in nfs4_alloc_client() when an error in the initialization process triggers an improper cleanup of the callback IDR entry. This results in a stale pointer that can be accessed by later NFSv4.0 callback lookups, leading to a use after free condition that does not require user authentication.

The vulnerability carries a CVSS score of 9.8, indicating a critical risk of full system compromise. Successful exploitation could allow an unauthenticated remote attacker to trigger memory corruption, potentially leading to arbitrary code execution, system crashes, or escalation of privileges, which poses a severe threat to data integrity and service availability.

Immediate Action: Update the Linux kernel to the corrected stable versions, specifically 5.10.270, 5.15.221, 6.1.188, or 6.6.157, to ensure the callback IDR entry is correctly removed during allocation failure.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected NFS service terminations that may indicate exploitation attempts.

Compensating Controls: Restrict network access to the NFS service to trusted subnets using host-based firewalls or network access control lists to reduce the attack surface.

Public Exploit Available: Unknown.

Given the critical CVSS severity rating, administrators should prioritize patching affected kernel versions as soon as they become available through their respective distribution vendors. Ensuring the kernel is updated to the provided stable releases will remediate the memory management flaw and prevent the potential for unauthenticated remote exploitation.