A vulnerability in the Linux kernel UDF file system driver could allow an attacker to cause system crashes or potentially execute code via a malicious UDF image.

The vulnerability exists in the udf_read_tagged function. It fails to reject descriptors where the CRC length exceeds the block size, which can lead to memory corruption when the kernel attempts to process the tagged data.

This vulnerability could be leveraged to cause a denial of service or, in specific conditions, local privilege escalation. Given the CVSS score of 8.4, it represents a high risk for systems that handle untrusted removable media or disk images formatted with the UDF file system.

Immediate Action: Update the Linux kernel to version 5.10.258, 5.15.209, 6.1.175, 6.6.140, or a subsequent release.

Proactive Monitoring: Monitor kernel logs for UDF driver errors or segmentation faults when mounting external storage devices.

Compensating Controls: Disable the mounting of UDF-formatted file systems if not required by the specific workload to eliminate the attack surface.

Public Exploit Available: Unknown

Systems that frequently mount external media or handle user-provided disk images are at higher risk. We recommend applying the kernel patch immediately to ensure robust validation of UDF metadata and to prevent potential exploitation.