A guest-triggerable kernel panic flaw in the Linux kernel KVM subsystem affects multiple kernel branches and poses a high risk of denial of service.

This is a kernel-level denial of service vulnerability involving improper handling of potentially unaligned memory accesses in the KVM ioeventfd datamatch mechanism, requiring no user interaction and no initial privileges from a local guest perspective.

The exploitation of this vulnerability leads directly to a kernel panic, resulting in unexpected hypervisor or guest crashes and severe system downtime. With a CVSS score of 7.1, the high severity rating reflects the potential for complete service interruption of virtualized environments, disrupting business-critical applications and operations.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later depending on the active release branch.

Proactive Monitoring: Monitor hypervisor system logs for unexpected kernel panics, stack traces related to KVM ioeventfd, or sudden guest reboots.

Compensating Controls: Restrict local guest access and isolate untrusted virtual machines where kernel updates cannot be applied immediately.

Public Exploit Available: No

Administrators must prioritize updating vulnerable Linux kernel packages to the patched versions immediately to eliminate the risk of guest-triggered kernel panics. Failure to patch leaves virtualized infrastructures exposed to potential denial of service attacks originating from compromised or untrusted virtual machine guests.