Linux Kernel AF_UNIX MSG_OOB Flaw Causes Use-After-Free Read/Write

Google Project Zero disclosed a Linux kernel vulnerability affecting Linux >= 6.9 in which broken handling of AF_UNIX MSG_OOB traffic can trigger a use-after-free (UAF) condition, enabling both read and write access to freed memory. The issue was published in Project Zero's tracker as issue 423023990, indicating a memory-safety flaw in the kernel's UNIX domain socket implementation rather than an application-level bug.

The available references do not include a vendor advisory, patch details, CVE assignment, or exploitation evidence, but the bug title indicates potentially serious impact because kernel-level UAF read/write conditions can often be leveraged for privilege escalation or system compromise. Security teams running Linux kernels in the affected branch should monitor upstream kernel fixes and distribution backports, prioritize patch validation for systems that rely on local socket communication, and assess exposure in environments where untrusted local code execution is possible.