A high-severity vulnerability in the Linux kernel BPF trampoline mechanism could allow a local attacker to trigger memory corruption and cause system instability.

This flaw exists within the BPF tracing link release logic, where improper management of trampoline flags during verifier operations leads to memory corruption. The vulnerability requires the attacker to have local access and low privileges to interact with BPF tracing functionalities.

Successful exploitation of this vulnerability could lead to a denial of service through kernel crashes or unintended system behavior. Because the vulnerability affects the kernel, an attacker could potentially gain elevated control over the operating system, creating a significant risk to data integrity and system availability. The CVSS score of 7.8 reflects the high severity associated with local privilege escalation and system compromise risks.

Immediate Action: Update the Linux kernel to version 7.2.6 or the latest stable release provided by your distribution vendor to incorporate the necessary patches.

Proactive Monitoring: Monitor system logs for kernel warnings, specifically those referencing bpf_tracing_link_release or other BPF-related kernel panics.

Compensating Controls: Restrict access to BPF-related system calls to only authorized administrative users, as this significantly reduces the attack surface for local users.

Public Exploit Available: No

The vulnerability in the Linux kernel BPF subsystem represents a significant risk for environments where local users may have the ability to execute BPF programs. Administrators should prioritize patching the kernel to the recommended version to resolve the trampoline flag corruption issue. Failure to patch may leave systems susceptible to local denial of service or further exploitation of the kernel memory space.