An out-of-bounds read and kernel panic vulnerability in the Linux kernel UDF file system allows local users with media mounting capabilities to cause a denial of service.

This is a boundary validation flaw in the udf_free_blocks function of the Linux kernel UDF file system driver, requiring low local privileges to exploit via crafted file systems.

A successful exploit results in a complete system crash or kernel panic, leading to immediate service disruption and system downtime. Although the CVSS score is 7.8, the potential for local denial of service poses a significant risk to shared infrastructure and desktop environments where unprivileged users can mount removable media.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later depending on the active distribution branch.

Proactive Monitoring: Monitor system logs for unexpected kernel panics, stack traces involving udf_free_blocks, or unauthorized mounting of removable file systems.

Compensating Controls: Restrict the mounting of removable UDF file systems to administrative users via system policy tools like polkit or UDisks.

Public Exploit Available: No (no confirmed public exploit or weaponized module currently exists in the available data)

Administrators managing systems that permit unprivileged mounting of UDF file systems must prioritize applying the latest kernel patches. Prompt remediation prevents local users from deliberately or accidentally triggering kernel panics through malformed storage media.