A buffer sizing flaw in the Linux kernel nvmem zynqmp driver affects Linux kernel versions prior to 6.12.81, 6.18.22, and 6.19.12, carrying severe potential for system instability and arbitrary code execution.

This is a memory corruption vulnerability within the nvmem zynqmp driver, specifically caused by an incorrect buffer size used in DMA allocation and memcpy functions requiring low local privileges.

A successful exploitation of this vulnerability can result in local privilege escalation, arbitrary code execution, or complete system denial of service. The high CVSS score of 7.8 reflects the severity of potential kernel-level memory corruption, which compromises the confidentiality, integrity, and availability of the host operating system and any hosted services.

Immediate Action: Update the Linux kernel to version 6.12.81, 6.18.22, 6.19.12, or apply the corresponding upstream stable kernel patches.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected reboots that may indicate memory corruption attempts.

Compensating Controls: Restrict local user account creation and enforce strict least-privilege principles to limit the ability of unauthorized local actors to interact with vulnerable device drivers.

Public Exploit Available: No

System administrators must prioritize patching affected Linux kernel environments to prevent severe memory corruption and potential host compromise. Apply the vendor updates immediately and verify kernel versions across all deployed instances.