A race condition within the Linux kernel NFC LLCP subsystem could allow a local authenticated attacker to achieve local privilege escalation or system instability.

The vulnerability exists in the nfc_llcp_getsockopt function, which incorrectly handles the llcp_sock local pointer outside of a locked region. A local attacker with low privileges can exploit this race condition to dereference a freed pointer, resulting in a use after free scenario.

The exploitation of this vulnerability allows a local attacker to potentially execute arbitrary code with kernel level privileges or crash the system. Given the CVSS score of 7.8, this poses a significant risk to the integrity and availability of affected systems, particularly in multi user environments where local access is provided to untrusted users.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, 6.6.157, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic events, which may indicate attempted exploitation of use after free conditions.

Compensating Controls: If patching is delayed, restrict access to the NFC subsystem or limit the ability of non privileged users to interact with socket operations if not required for system functionality.

Public Exploit Available: Unknown

This vulnerability represents a serious risk to kernel stability and security. Administrators should prioritize the application of kernel updates across all affected environments to eliminate the race condition. Regular patching cycles are essential to defend against local privilege escalation vectors within the Linux kernel.