The Linux kernel vulnerability involves improper preemption handling during task exit when a task oops. Specifically, make_task_dead() calls do_task_dead() with preemption enabled, but do_task_dead() must be called with preemption disabled because it calls __schedule(). If preemption occurs between the task becoming TASK_DEAD and entering the scheduler, the scheduler's assumption that the dead task's stack is no longer needed is violated. This leads to repeated dropping of references on the dead task's stack, causing use-after-free or double-free of the task stack and resulting in memory corruption. This issue affects Linux kernel versions prior to 7.0.0-28.28.1 in the linux-hwe-edge product line.

Successful exploitation can lead to severe memory corruption due to use-after-free or double-free conditions on the task stack. This can compromise system stability and security, potentially allowing escalation of privileges or denial of service. The vulnerability affects tasks that experience an oops during exit, which can occur in normal operations such as file release handlers.

A fix is available in linux-hwe-edge version 7.0.0-28.28.1 and later. Users should update to this version or a later patched release to remediate the vulnerability. No additional mitigations are indicated by the vendor advisory.