A use-after-free vulnerability in the Linux kernel HID subsystem, specifically during failed device probe operations, may allow an unauthenticated attacker to compromise system integrity and availability.

The HID subsystem fails to properly synchronize input during a failed probe operation. This allows a race condition where report callbacks can access memory that is currently being freed, leading to a use-after-free condition.

A successful exploit of this vulnerability could lead to a system crash, denial of service, or potentially arbitrary code execution with kernel-level privileges. Given the CVSS score of 8.8, this flaw represents a significant risk to system stability and security, as it allows an unauthenticated attacker to exploit low-level kernel memory management.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, 6.6.157, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Review system logs for kernel oops or panic events, especially those related to HID or USB device initialization, which may indicate attempted exploitation.

Compensating Controls: Restrict physical access to hardware ports and use kernel hardening features like KASLR or control flow integrity to increase the difficulty of successful exploitation.

Public Exploit Available: Unknown

This vulnerability is a high-severity issue that directly impacts the security of the Linux kernel. Administrators should prioritize patching their systems, particularly those exposed to untrusted hardware devices, by applying the latest kernel updates provided by their distribution maintainers as soon as they become available.