An improper interrupt check in the Linux kernel vmalloc component allows unauthenticated attackers to trigger a denial of service via kernel panic.

This is a denial of service vulnerability caused by an incorrect in_interrupt() check within __get_vm_area_node(), which incorrectly reports true when bottom halves are disabled and leads to an unintended kernel BUG() invocation, requiring no privileges to trigger.

A successful exploit of this vulnerability results in a kernel panic, leading to an immediate denial of service for the affected host system. With a CVSS score of 7.5, this high severity flaw poses a significant operational risk to system availability, potentially causing widespread service disruptions across critical infrastructure.

Immediate Action: Update the Linux kernel to version 7.0.12 or later, or apply the official fix commits ad7eff07b625f53c3fb513b30d7a8c5a79fbc7ce and 04aa71da5f35aacdc9ae9cb5150947daa624f641.

Proactive Monitoring: Monitor system logs for kernel panics, unexpected reboots, and stack traces related to vmalloc or __get_vm_area_node().

Compensating Controls: Implement robust network perimeter defenses and restrict exposure of services that trigger heavy bridging and vmalloc operations from untrusted networks.

Public Exploit Available: No (false / unknown)

Given the high severity and potential for system wide disruption, administrators must prioritize updating the Linux kernel to the patched version as soon as possible. Applying the vendor provided patches or upgrading to version 7.0.12 is critical to mitigating the risk of denial of service attacks.