A local privilege escalation and denial of service vulnerability in the Linux kernel virtio GPU driver threatens system integrity and availability for affected environments.

This issue is a resource management defect involving lock handling within virtio_gpu_cursor_plane_update and virtio_gpu_resource_flush functions, requiring low privileges and local access to trigger.

Successful exploitation of this vulnerability can lead to complete system compromise, unauthorized data access, and unexpected system reboots or crashes. The assigned CVSS score of 7.8 reflects a high severity level, primarily due to the potential for local privilege escalation and full impact on confidentiality, integrity, and availability.

Immediate Action: Update the Linux kernel to version 6.1.175, 6.6.142, 6.12.92, 6.18.34, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel warnings, unexpected driver crashes, and unauthorized local access attempts.

Compensating Controls: Restrict local system access to authorized personnel only and enforce strict least privilege principles to minimize exposure.

Public Exploit Available: No

Organizations running affected Linux kernel versions should prioritize applying the official kernel patches as soon as possible. Given the high CVSS score and local impact potential, timely deployment of kernel updates prevents potential privilege escalation scenarios.