A memory corruption vulnerability in the Linux kernel i915 graphics driver could allow a local attacker to achieve elevated privileges or system crashes.

The vulnerability is a buffer overflow occurring within the drm/i915/hdcp subsystem. The kernel fails to validate the bounds of the streams array before performing a write operation, allowing an attacker with local, low-privileged access to trigger an out-of-bounds write.

Successful exploitation of this flaw allows a local user to corrupt kernel memory, which can lead to arbitrary code execution, privilege escalation, or a complete system denial of service. Given the CVSS score of 7.8, this represents a significant risk to system integrity and availability, particularly in multi-tenant or shared computing environments where local user access is permitted.

Immediate Action: Update the Linux kernel to version 5.15.217, 6.1.184, 6.6.151, 6.12.103, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults that may indicate attempted memory corruption or driver instability.

Compensating Controls: Restrict access to the graphics hardware device nodes for unauthorized users, and ensure that security-hardened kernel modules (such as those providing memory protection) are active.

Public Exploit Available: No

This vulnerability presents a high risk to the stability and security of systems running the affected Linux kernel versions. System administrators should prioritize the deployment of kernel updates through their respective package management systems. Until patching is possible, ensure that local access is restricted to trusted users to minimize the exposure window for this local-vector vulnerability.