An out-of-bounds or improper memory handling vulnerability in the Linux kernel crypto subsystem exposes systems to potential high-severity impacts due to incorrect sequence bit management during decryption.

This is a memory handling vulnerability within the crypto subsystem authencesn module, triggered during out-of-place decryption operations where high-order sequence bits are improperly placed, requiring local authenticated access to exploit.

A successful exploitation of this kernel vulnerability could lead to local privilege escalation, system compromise, or kernel panics resulting in denial of service. The assigned CVSS score of 7.8 reflects a high severity level, primarily due to the potential for complete confidentiality, integrity, and availability impact on affected host systems.

Immediate Action: Update the Linux kernel to the fixed versions, specifically 5.10.254, 5.15.204, 6.1.170, 6.6.137, or later stable releases.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unauthorized local execution attempts.

Compensating Controls: Restrict local shell access and enforce strict the principle of least privilege to minimize the risk of authenticated local attackers reaching vulnerable code paths.

Public Exploit Available: No (false / unknown)

Organizations running affected Linux kernel branches must prioritize scheduling and applying kernel patches during the next maintenance window. Because kernel vulnerabilities can be leveraged for full system compromise by local attackers, applying the vendor-supplied updates remains the most critical mitigation step.