A memory corruption vulnerability in the Linux kernel drm/hyperv driver may allow a local attacker to cause a system crash or potentially access sensitive information.

The driver fails to validate the resolution_count field during a SYNTHVID_RESOLUTION_RESPONSE operation, allowing it to exceed the defined array bounds. This is a local, unauthenticated vulnerability that occurs during the parsing loop.

While the vulnerability requires local access, the potential for denial of service or information disclosure is significant in multi-tenant or shared environments. With a CVSS score of 7.7, this flaw represents a high risk to system stability and data confidentiality for affected Linux deployments.

Immediate Action: Update the Linux kernel to a patched version, specifically 5.15.210, 6.1.176, 6.6.143, or 6.12.93.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected driver errors related to hyperv components.

Compensating Controls: Restrict local system access to authorized personnel only to reduce the attack surface for local-only vulnerabilities.

Public Exploit Available: No (exploit_available: false)

System administrators should prioritize patching the kernel to the recommended versions listed above. Given the potential for system-wide instability, testing the patch in a staging environment is advised before a full production rollout.