A critical memory corruption vulnerability exists in the Linux kernel cryptographic subsystem that can lead to system compromise.

This is an improper validation flaw affecting the Intel QuickAssist Technology (QAT) crypto driver during RSA key parsing, requiring low local privileges and no user interaction.

A successful exploit of this vulnerability could allow an attacker with local access to corrupt system memory, potentially resulting in arbitrary code execution, privilege escalation, or complete denial of service. With a CVSS score of 7.8, this high severity rating reflects the severe impact on confidentiality, integrity, and availability of the underlying host operating system.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later depending on your active kernel series.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, and anomalous execution behavior associated with cryptographic driver initialization.

Compensating Controls: Restrict local shell access and apply strict least privilege principles to limit which users can interact with vulnerable cryptographic hardware interfaces.

Public Exploit Available: No

Administrators must prioritize updating vulnerable kernel packages to patched stable versions to eliminate the risk of local memory corruption. Because this flaw requires local execution access, hardening host environments and auditing user permissions provide essential defense-in-depth until reboots into updated kernels can be completed.