A memory safety flaw in the Linux kernel rmnet driver could allow a local attacker to trigger an out of bounds read, potentially leading to system instability or information disclosure.

The vulnerability occurs when ingress deaggregation is disabled, causing the rmnet handler to skip necessary length validation. This permits the parser to process malformed MAP frames, resulting in an out of bounds read when dereferencing headers based on untrusted length values.

Successful exploitation requires a local attacker with low privileges. While the attack vector is local, the potential for kernel level memory corruption poses a significant risk to system integrity and availability, as indicated by the CVSS score of 7.3. Organizations running affected kernel versions on shared hosting or multi user systems face the highest risk of unauthorized data access or service disruption.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or the latest available stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or bug reports related to the rmnet driver or slab out of bounds errors.

Compensating Controls: Restrict access to the system to trusted users only and employ kernel hardening features such as KASLR to increase the difficulty of exploiting memory corruption vulnerabilities.

Public Exploit Available: No

Given the potential for kernel level memory corruption, this vulnerability should be prioritized within standard patch cycles. System administrators should verify their current kernel version and apply the upstream patches to prevent potential local exploitation.