A use-after-free vulnerability in the Linux kernel drm/omap driver poses a significant risk for local privilege escalation and system compromise.

The vulnerability exists in the drm/omap Display Serial Interface (DSI) component, where copying the interrupt service routine (ISR) table creates a risk of use-after-free when stack-allocated objects are passed to ISRs that are unregistered during handling. An attacker with local, low-privileged access can trigger this condition to achieve arbitrary code execution or cause a system crash.

The exploit requires local access to the system, but successful execution leads to full system compromise, including confidentiality, integrity, and availability loss. With a CVSS score of 7.8, this high-severity flaw represents a substantial risk to server environments and endpoints where untrusted local users may exist.

Immediate Action: Update the Linux kernel to version 5.15.221, 6.1.188, 6.6.157, 6.12.110, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unauthorized attempts to interact with DRM/DSI hardware interfaces.

Compensating Controls: Restrict local shell access to the minimum number of necessary users and employ kernel hardening features such as KSPP (Kernel Self Protection Project) configurations to mitigate memory-related exploits.

Public Exploit Available: Unknown

Given the potential for complete system takeover, administrators should prioritize patching the Linux kernel across all affected infrastructure. While local access is a prerequisite, this vulnerability should be patched during the next available maintenance window to ensure the stability and security of the host environment.