A memory corruption vulnerability in the Linux kernel ASoC meson driver allows local attackers to trigger a use-after-free or double-free condition, resulting in potential system compromise.

The vulnerability exists in the meson_card_reallocate_links function, where improper handling of memory reallocation failures leads to a use-after-free and double-free during probe error paths. This flaw is locally exploitable by an unauthenticated attacker capable of triggering the specific driver error condition.

Successful exploitation of this vulnerability could lead to a denial of service (system crash) or potentially allow for arbitrary code execution with kernel-level privileges. Given the CVSS score of 7.4, this represents a significant security risk for systems utilizing the affected ASoC meson audio subsystem. The impact is primarily localized to the integrity and availability of the host operating system.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, 6.6.157, or newer, depending on the current stable branch in use.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages associated with the ASoC driver or memory allocation errors.

Compensating Controls: Restrict access to the system to authorized users only, as local access is a prerequisite for exploitation. Disabling the specific meson sound driver, if not required for system functionality, can also mitigate the attack surface.

Public Exploit Available: Unknown.

This vulnerability presents a high risk due to the potential for kernel-level memory corruption. System administrators should prioritize testing and deploying the provided kernel updates across all affected environments to eliminate the risk of exploitation. Immediate patching is the most effective way to address the underlying memory management defect.