A critical out-of-bounds memory access vulnerability exists in the Linux kernel virtio-rng driver that could allow a malicious hypervisor to leak sensitive kernel memory.

The virtio-rng driver fails to validate the length of data reported by the device before performing a memcpy operation. This flaw allows a malicious hypervisor to trigger an out-of-bounds read, potentially exposing sensitive data from adjacent kernel slab memory to the guest environment.

Successful exploitation of this vulnerability poses a significant risk to the confidentiality of guest virtual machines, particularly within confidential computing environments. By leaking kernel memory contents, an attacker could potentially obtain sensitive information or cryptographic keys, leading to complete compromise of the guest instance. While the CVSS score of 7.7 reflects high severity, the nature of the flaw in cross-boundary scenarios elevates the urgency for systems utilizing virtualized infrastructure.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later, depending on the specific stable branch in use.

Proactive Monitoring: Monitor kernel logs for unusual virtio-rng driver behavior and implement memory integrity monitoring tools within virtualized guest environments.

Compensating Controls: Ensure that virtual machine configurations follow the principle of least privilege regarding hypervisor access and maintain strict isolation between guest and host memory spaces.

Public Exploit Available: No (exploit_available: unknown)

This vulnerability represents a critical risk for users of virtualized Linux environments. Administrators should prioritize patching the kernel across all affected guest instances to prevent potential memory leakage. Given the potential for cross-boundary data exposure, immediate application of the provided kernel updates is strongly advised to maintain the security posture of virtualized workloads.