A heap corruption vulnerability in the Linux kernel IIO ADC subsystem affects specific versions and can lead to complete system compromise.

This is a heap overflow flaw caused by an incorrect fallback path in the ad_sigma_delta_clear_pending_event function for registerless devices, requiring local low-privileged access.

A successful exploit of this vulnerability could allow an authenticated local attacker to achieve severe system instability, arbitrary code execution, or complete system compromise. The high CVSS score of 7.8 reflects the potential for total loss of confidentiality, integrity, and availability of the affected host.

Immediate Action: Update the Linux kernel to fixed versions such as 6.18.39, 7.1.4, or later where the patch has been integrated.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or anomalous process terminations that might indicate heap corruption attempts.

Compensating Controls: Restrict local shell access and enforce strict the principle of least privilege to minimize the risk of unauthorized users executing malicious code locally.

Public Exploit Available: No

Administrators managing systems utilizing the affected Linux kernel versions should prioritize applying the official upstream patch or updating to a secure kernel release immediately. Given the high severity and potential for core system compromise, mitigating this vulnerability prevents local privilege escalation and kernel instability.