A slab out-of-bounds write vulnerability in the Linux kernel statmount subsystem allows a local authenticated attacker to compromise system integrity, confidentiality, and availability.

This is a slab out-of-bounds write flaw occurring within the statmount_mnt_idmap function due to improper handling of buffer overflow checks during string formatting, requiring low local privileges and no user interaction.

A successful exploit of this kernel vulnerability can lead to local privilege escalation, arbitrary code execution within kernel space, kernel panics causing system downtime, and complete compromise of host confidentiality and integrity. The assigned CVSS score of 7.8 designates this as a high-severity issue, reflecting the severe consequences of kernel memory corruption even though the attack vector requires local access.

Immediate Action: Update the Linux kernel to version 6.18.34, 7.0.11, or later versions containing the upstream fix commits.

Proactive Monitoring: Monitor system logs for unexpected kernel panics, segmentation faults, or anomalies in local process execution that might indicate exploitation attempts.

Compensating Controls: Restrict local shell access and auditing user privileges to minimize the pool of accounts capable of executing arbitrary code or interacting with vulnerable kernel interfaces.

Public Exploit Available: No

Given the high CVSS severity and the critical nature of kernel memory management flaws, administrators must treat this advisory with urgency. Apply the recommended kernel updates immediately to eliminate the risk of local system compromise and kernel instability.