A race condition within the Linux kernel block cgroup subsystem creates a high-severity use-after-free vulnerability that could allow a local authenticated attacker to compromise system integrity.

The vulnerability exists in the blkcg_activate_policy function, which fails to correctly synchronize with concurrent block cgroup deletion. An attacker with local low-level privileges can trigger this race condition to perform a use-after-free operation, resulting in memory corruption or potential arbitrary code execution.

Successful exploitation of this vulnerability allows a local attacker to escalate privileges or cause a kernel panic, leading to significant system instability and potential data compromise. While the CVSS score of 7.8 reflects a high severity, the requirement for local authenticated access limits the immediate threat surface to users already present on the system. However, the potential for kernel-level impact warrants immediate attention to prevent unauthorized escalation of privileges.

Immediate Action: Update the Linux kernel to version 6.1.17, 6.2.4, 6.18.52, 7.2.6, or any subsequent stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unexpected kernel oops or segmentation faults that may indicate an attempt to trigger the race condition.

Compensating Controls: Restrict access to system-level configuration tasks and limit the ability of low-privileged users to interact with block device scheduler settings.

Public Exploit Available: Unknown.

Given the critical nature of kernel-level vulnerabilities, organizations should prioritize patching affected systems during the next scheduled maintenance window. Because this flaw allows for potential privilege escalation, it represents a significant risk to multi-user environments and cloud infrastructure. Ensure that all kernel updates are verified through standard testing procedures before deployment to production environments.