A high-severity vulnerability in the Linux kernel QAT driver, involving improper character device management, may allow local attackers to compromise system integrity.

The vulnerability exists in the QuickAssist Technology (QAT) driver, which exposed unused character devices (qat_adf_ctl) and associated IOCTLs. An authenticated local user could potentially leverage these interfaces to interact with device configurations or status queries in an unauthorized manner.

With a CVSS score of 7.8, this kernel-level flaw poses a significant risk to system security. An attacker with local access could potentially escalate privileges, compromise data, or cause system instability by manipulating the driver interfaces, leading to a complete loss of system integrity and availability.

Immediate Action: Update the Linux kernel to version 5.10.260, 5.15.211, 6.1.177, or 6.6.144, depending on the current branch in use.

Proactive Monitoring: Audit system logs for any unexpected usage of the qat_adf_ctl character device or anomalous IOCTL calls.

Compensating Controls: Implement strict kernel module loading policies and limit user access to sensitive device nodes to minimize the attack surface.

Public Exploit Available: Unknown.

Kernel vulnerabilities require immediate attention due to their potential for full system compromise. Organizations running Linux distributions should verify their kernel version and apply the upstream patches provided by their respective distribution maintainers.