A critical out-of-bounds write vulnerability in the Linux kernel MCTP serial driver allows attackers with specific capabilities to gain system control.

This is an out-of-bounds write vulnerability within the Message Control Transport Protocol (MCTP) serial driver, which can be triggered by a local attacker with CAP_NET_ADMIN capabilities sending specially crafted zero-length frames.

The vulnerability is rated as critical with a CVSS score of 9.6. Successful exploitation allows an attacker to corrupt kernel memory, which can lead to complete system compromise, unauthorized data access, or total system failure.

Immediate Action: Update the Linux kernel to version 6.1.183, 6.6.148, 6.12.101, 6.18.42, or later.

Proactive Monitoring: Monitor for suspicious network activity or unauthorized attempts to leverage CAP_NET_ADMIN capabilities.

Compensating Controls: Limit the assignment of the CAP_NET_ADMIN capability to only essential services and users to reduce the attack surface.

Public Exploit Available: No (unknown).

Given the critical CVSS severity, immediate patching of the Linux kernel is required. Administrators should verify the patch version and ensure that all production systems are updated to the latest supported kernel release to prevent potential exploitation.