A memory safety flaw in the Linux kernel Cedrus driver could allow a local attacker to perform out-of-bounds memory reads, potentially leading to information disclosure or system instability.

The Cedrus driver fails to properly validate index values when processing H.264 reference list entries from stateless slice controls. An attacker with local access can supply malformed reference lists to trigger an out-of-bounds read, as the driver lacks sufficient bounds checking when accessing the decode->dpb[] array.

The vulnerability carries a CVSS score of 7.1, indicating a high severity risk. Successful exploitation allows a local user to bypass memory protections to read sensitive kernel memory or cause system crashes, which could result in unauthorized access to sensitive data or denial of service for critical infrastructure relying on the kernel.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or a later stable release provided by your distribution.

Proactive Monitoring: Review system logs for kernel oops or segmentation faults related to media decoding tasks or the Cedrus driver.

Compensating Controls: Restrict access to video acceleration devices or kernel interfaces to trusted users only to prevent unauthorized interaction with the vulnerable driver.

Public Exploit Available: No (exploit_available: false)

Organizations should prioritize patching this vulnerability as part of their regular kernel maintenance cycle. Given the potential for information disclosure via out-of-bounds reads, upgrading to the specified fixed kernel versions is essential to maintain system integrity and protect kernel memory from local exploitation attempts.