A type error in the Linux kernel crypto driver affects the cryptographic subsystem, introducing risks of denial of service or local privilege escalation.

This is a type mismatch vulnerability involving the nx_crypto_ctx_exit function and incorrect pointer types passed from crypto_shash_ctx, requiring low local privileges to trigger.

Successful exploitation of this flaw can result in a kernel panic, leading to unexpected system reboots and denial of service. With a CVSS score of 7.8, the vulnerability poses a high risk to host availability and data integrity, as a local attacker could leverage the instability to impact overall system operations.

Immediate Action: Update the Linux kernel to version 6.18.38, 7.1.3, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel BUG messages, unexpected kernel data access faults, or crash dumps originating from the cryptographic subsystem.

Compensating Controls: Restrict local shell access and limit unprivileged user capabilities on vulnerable hosts to reduce the attack surface.

Public Exploit Available: false

Administrators must prioritize updating vulnerable Linux kernel packages to the patched versions immediately. Applying these updates eliminates the type confusion vulnerability and prevents potential kernel crashes and associated service disruptions.