A critical memory corruption vulnerability in the Linux kernel block subsystem allows local authenticated attackers to achieve arbitrary code execution or system compromise.

The flaw exists in the block layer function bio_integrity_copy_user() where bip_vcnt is improperly overwritten with nr_vecs. An attacker requires local access with low privileges and no user interaction to trigger the condition.

Successful exploitation of this kernel vulnerability can lead to complete host compromise, allowing attackers to read and modify sensitive data, escalate privileges, or induce kernel panics leading to denial of service. The assigned CVSS score of 7.8 establishes a high severity classification, reflecting the severe consequences of kernel-level memory corruption despite requiring local access.

Immediate Action: Update the Linux kernel to version 6.12.92, 6.18.34, 7.0.11, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for unexpected kernel panics, segmentation faults, or unauthorized local execution attempts.

Compensating Controls: Restrict local shell access and audit user accounts to minimize the exposure window for low-privileged users capable of triggering local kernel flaws.

Public Exploit Available: No

Administrators must prioritize updating vulnerable Linux kernel installations to the patched releases as soon as possible. Applying the official vendor patch is critical to eliminating the underlying memory overwrite flaw and preventing potential local privilege escalation.