A vulnerability in the Linux kernel WiFi subsystem allows a local attacker to achieve potential privilege escalation or system instability by exploiting improper cleanup during interface teardown.

This is a use-after-free or race condition vulnerability within the cfg80211 subsystem, specifically occurring during P2P or NAN interface teardown. An attacker with local, low-privileged access can trigger this by forcing an interface stop while a measurement request is pending, causing the kernel to retain and potentially use stale driver state.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation could allow a local attacker to compromise system integrity or cause a denial of service, potentially leading to unauthorized access to sensitive kernel memory or system crashes. Organizations relying on Linux-based infrastructure, particularly those utilizing wireless networking features, should prioritize this update to prevent local privilege escalation.

Immediate Action: Update the Linux kernel to version 6.18.52, 7.2.6, or newer to incorporate the necessary patches for cfg80211 interface teardown.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts related to the cfg80211 or wireless drivers.

Compensating Controls: Restrict access to wireless management interfaces and limit local user access to the system to reduce the attack surface for local exploits.

Public Exploit Available: Unknown

Given the potential for local privilege escalation and the high CVSS severity, applying the kernel patch is essential. System administrators should verify their distribution update channels for the availability of the fixed kernel versions and schedule maintenance to deploy these updates as soon as they are made available by the maintainers.