An out-of-bounds memory vulnerability in the Linux kernel UDF file system implementation allows local attackers with low privileges to achieve high system impact.

This flaw involves an improper input validation vulnerability within the udf_load_sparable_map function, where the sparing table length is incorrectly treated as a byte count rather than an entry count by a locally authenticated user.

A successful exploit of this vulnerability can allow a local user to corrupt kernel memory, read sensitive data, or execute arbitrary code with elevated privileges, potentially leading to a complete system compromise or kernel panic. The assigned CVSS score of 7.8 indicates a high severity threat, primarily constrained by the requirement for local system access.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later depending on the active distribution branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unusual storage mounting activities involving untrusted UDF file system images.

Compensating Controls: Restrict local user account creation and prevent untrusted or unverified storage media from being mounted on critical systems.

Public Exploit Available: No - unknown

System administrators must prioritize applying the latest kernel patches provided by their respective Linux vendors. Given the high CVSS severity and potential for arbitrary memory corruption, updating affected hosts immediately is critical to neutralize local privilege escalation risks.