A high-severity memory management vulnerability in the Linux kernel virtual terminal driver can lead to local denial of service or code execution.

This is an improper handling of buffer dimensions during alternate screen exits and console resizing, requiring low privileges and local access to trigger an out-of-bounds memory read.

A successful exploit of this vulnerability can result in kernel panics, system crashes, and potential local privilege escalation. This represents a significant availability risk for multi-tenant or shared hosting environments where unprivileged users have local shell access. The CVSS score of 7.8 reflects the high potential impact on system integrity and availability despite requiring local authentication.

Immediate Action: Update the Linux kernel to version 6.18.22, 6.19.12, or apply the appropriate upstream stable fix commits.

Proactive Monitoring: Monitor system logs for kernel oops messages, page faults, and unexpected reboots indicating potential exploitation attempts.

Compensating Controls: Restrict local interactive shell access to trusted users and enforce strict least-privilege principles to limit potential attackers from reaching the vulnerable virtual terminal interface.

Public Exploit Available: false

Administrators managing systems running affected Linux kernel versions should prioritize deploying the latest stable kernel updates. Because the vulnerability requires local access, securing console access and updating vulnerable packages promptly will effectively mitigate the underlying risk of system destabilization.