A high-severity use-after-free vulnerability in the Linux kernel tegra241-cmdqv driver could lead to system compromise or denial of service.

This is a memory management flaw where the __tegra241_cmdqv_probe function fails to correctly update pointers after a devm_krealloc call. An attacker can trigger a dereference of freed memory if the reallocation process fails, which occurs in an unauthenticated context with local access.

Successful exploitation of this vulnerability can result in local privilege escalation or a complete system crash, leading to significant downtime for critical infrastructure. While the local attack vector limits the initial scope, the potential for kernel-level code execution poses a severe risk to data integrity and system availability. The CVSS score of 7.4 reflects the high impact on confidentiality, integrity, and availability should a local attacker successfully trigger the memory corruption.

Immediate Action: Update the Linux kernel to version 7.2.6 or later, which contains the necessary memory management fixes.

Proactive Monitoring: Monitor system logs for kernel panic events or segmentation faults that may indicate attempts to trigger memory management failures.

Compensating Controls: Restrict local access to systems running affected kernel versions to trusted personnel only, as the vulnerability requires local execution to trigger.

Public Exploit Available: Unknown.

This vulnerability represents a significant risk to kernel stability and security. Administrators should prioritize upgrading to the patched kernel version to prevent potential exploitation. Given the low barrier for triggering memory corruption once local access is achieved, immediate patching is recommended to maintain a secure operating environment.