This vulnerability affects Mullvad wireguard.sys version 0.10.1, specifically the AdapterState function within the IOCTL Handler component. The flaw causes improper updating of a reference count, which can lead to potential resource management issues or instability. The attack requires local access with high privileges and does not require user interaction. Although exploit code is publicly available, there is no evidence of exploitation in the wild. The vendor was notified early, but no remediation level or patch information has been provided as of the publication date.

The vulnerability allows an attacker with local high privileges to manipulate reference counts improperly, which may result in resource mismanagement or system instability. The CVSS 4.6 score reflects a medium severity impact with no direct remote exploitation or user interaction required. There is no indication of data confidentiality, integrity, or availability compromise beyond the described improper reference count update.

No official patch or remediation guidance is currently available. Since the vendor has not provided a fix or temporary mitigation, users should monitor vendor advisories for updates. Given the requirement for local high privileges, restricting local access and maintaining strict privilege controls can reduce risk until a fix is released.