A local memory overflow flaw in the Linux kernel qaic accelerator driver can lead to use after free conditions, high privilege compromise, and system instability.

This is an improper bounds check vulnerability located in the qaic_gem_object_mmap function, requiring low privileges and local access with no user interaction.

A successful exploit of this vulnerability can result in full confidentiality, integrity, and availability compromise of the host system because kernel memory corruption often leads to arbitrary code execution or kernel panics. The CVSS score of 7.8 indicates a high severity rating, reflecting the severe consequence of local privilege escalation and denial of service despite the local attack vector requirement.

Immediate Action: Update the Linux kernel to version 6.6.142, 6.12.92, 6.18.34, 7.0.11, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, and unauthorized attempts to interact with the qaic accelerator subsystem.

Compensating Controls: Restrict local shell access and limit user accounts capable of loading or interacting with accelerator driver modules.

Public Exploit Available: false

System administrators must prioritize applying the latest upstream kernel patches to vulnerable environments where the qaic driver is active. Securing local access boundaries and updating the kernel promptly will mitigate the risk of privilege escalation stemming from this memory mapping flaw.