A high-severity integer truncation vulnerability exists in the Linux kernel TIPC subsystem that can be exploited by local users to cause a denial of service through system crashes.

The Linux kernel TIPC subsystem fails to enforce a maximum bound on user-supplied MTU values for TIPC_NL_MEDIA_SET and TIPC_NL_BEARER_SET operations. An authenticated local user can provide an MTU value exceeding 65535, leading to integer truncation and a potential division by zero error within the kernel during link setup.

Successful exploitation allows an unprivileged local user to crash the system kernel, resulting in an immediate denial of service for all users and services hosted on the affected machine. While the CVSS score of 7.8 reflects a high risk due to the potential for local impact, the stability of core infrastructure is at risk if kernel panics are induced in production environments. System downtime resulting from such crashes may lead to significant operational disruption and data loss if processes are interrupted mid-transaction.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or BUG messages specifically referencing the TIPC subsystem or division errors.

Compensating Controls: Restrict access to the TIPC subsystem or user namespaces if not required for system operations, as the vulnerability is reachable by local users.

Public Exploit Available: No

Given the potential for system instability and kernel-level crashes, administrators should prioritize patching the Linux kernel during the next scheduled maintenance window. Because this vulnerability is reachable by local users, the risk is elevated in multi-tenant environments or systems where untrusted code may execute locally. Patching is the only reliable method to eliminate the risk of kernel-level denial of service.