An out-of-bounds memory write vulnerability in the Linux kernel iomap subsystem allows a local user with low privileges to potentially achieve system compromise.

The flaw occurs within the ifs_set_range_dirty and ifs_set_range_uptodate functions, where an unsigned integer underflow results from a zero-length range calculation. This underflow triggers an out-of-bounds bitmap_set operation, which can be reached by a local attacker with low privileges via a triggered user buffer fault during folio write operations.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation allows a local attacker to corrupt kernel memory, which can lead to privilege escalation, arbitrary code execution, or complete system instability and denial of service. Such an impact poses a significant threat to the confidentiality, integrity, and availability of host systems.

Immediate Action: Apply the latest stable kernel update provided by your distribution or upgrade the kernel to version 6.6.153, 6.12.101, 6.18.42, or 7.1.6.

Proactive Monitoring: Monitor system logs for kernel oops, segmentation faults, or unexpected system crashes that may indicate an exploitation attempt in the memory management subsystem.

Compensating Controls: Restrict local user access to the system and ensure that kernel hardening features such as KASLR are enabled to increase the difficulty of successful exploitation.

Public Exploit Available: Unknown

Given the potential for privilege escalation and the critical nature of the affected iomap subsystem, administrators should prioritize updating kernel packages across all affected infrastructure. System stability and security depend on the timely application of these upstream patches to prevent unauthorized kernel memory manipulation.