A critical vulnerability in the Linux kernel allows for out of bounds memory writes during concurrent GCOV instrumentation, posing a high risk of system compromise or denial of service.

The vulnerability arises because GCOV branch counters are global rather than per CPU, causing inconsistent values when accessed concurrently. An unauthenticated attacker could trigger this flaw during IPComp processing to induce memory corruption via out of bounds writes.

The flaw carries a CVSS score of 9.8, reflecting its potential for full system compromise. Successful exploitation could lead to arbitrary code execution, unauthorized data access, or persistent system instability, causing significant operational downtime and security breaches for affected infrastructure.

Immediate Action: Update the Linux kernel to version 6.18.38, 7.1.3, or later versions where the atomic counter update fix has been implemented.

Proactive Monitoring: Monitor system logs for kernel panics or page fault errors, particularly those involving zlib_inflate or ipcomp_decompress, which may indicate exploitation attempts.

Compensating Controls: If immediate patching is not feasible, consider disabling GCOV instrumentation in production kernels or restricting access to services utilizing IP Payload Compression (IPComp) if possible.

Public Exploit Available: No

Given the critical severity and potential for memory corruption, administrators should prioritize patching the Linux kernel across all affected environments. Organizations should verify their kernel build configurations and apply the upstream fixes provided by the stable kernel tree as soon as possible to mitigate the risk of exploitation.