A high-severity local privilege escalation and denial of service vulnerability exists within the Linux kernel bpf subsystem due to improper ftrace management.

This vulnerability occurs because the bpf tracing_multi link does not correctly set the ftrace_managed flag, which causes a failure to release links when attaching fentry links. This flaw requires the attacker to have local access and low privileges to execute the specific bpf sequence.

The vulnerability carries a CVSS score of 7.8, indicating a high risk to system integrity and availability. An attacker with local access could potentially exploit this to cause a kernel panic or achieve unauthorized system state changes, leading to significant service disruption and potential escalation of privileges.

Immediate Action: Update the Linux kernel to version 7.2.6 or later to incorporate the necessary fix for trampoline management.

Proactive Monitoring: Monitor system logs for kernel warnings, particularly those referencing bpf_trampoline_multi_detach or ftrace management, which may indicate attempted exploitation.

Compensating Controls: Restrict access to bpf-related system calls for non-privileged users to reduce the attack surface until the kernel can be patched.

Public Exploit Available: Unknown

Given the potential for kernel-level impact and the high CVSS severity rating, organizations should prioritize patching affected kernels as part of their standard maintenance cycle. System administrators should verify their kernel version and apply the 7.2.6 update promptly to ensure the bpf subsystem is correctly secured against this trampoline management error.