Buffer overflow in the Linux kernel's RCU subsystem diagnostic function print_cpu_stall_info() allows a local low-privileged attacker - under high-complexity timing conditions - to potentially corrupt kernel memory with high impact across confidentiality, integrity, and availability. Discovered by Linux Verification Center (linuxtesting.org) via static analysis (SVACE), this flaw is a code-correctness defect rather than an actively weaponized vulnerability: EPSS sits at 0.25% (16th percentile), it is absent from CISA KEV, and no public exploit code has been identified. Vendor patches have been applied across multiple kernel stable branches.
Use-after-free exposure in the Linux kernel's IPv6 Segment Routing (SR) subsystem arises from a defective error path in seg6_init() that omits a required genl_unregister_family() call when CONFIG_IPV6_SEG6_LWTUNNEL is not compiled in and seg6_hmac_init() subsequently fails, leaving a dangling kernel generic netlink family registration. A local attacker with low privileges on a specifically configured kernel build could leverage the resulting CWE-416 memory corruption to trigger kernel instability or potentially escalate privileges to ring-0. No public exploit code has been identified at time of analysis, and EPSS probability stands at a low 0.17%, indicating limited observed exploitation interest.
In the Linux kernel, the following vulnerability has been resolved: kunit: Fix kthread reference There is a race condition when a kthread finishes after the deadline and before the call to. Rated high severity (CVSS 7.0). This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.