A high-severity out-of-bounds memory read vulnerability in the Linux kernel TAS2781 audio driver poses a risk of information disclosure and system instability for local users.

The vulnerability exists within the TAS2781 firmware parser, where string parsing functions fail to verify the presence of a NUL terminator within the firmware buffer. This allows a malformed firmware image to cause the parser to read beyond the assigned buffer, requiring low-privileged local access to trigger.

Successful exploitation of this vulnerability could allow an attacker with local, low-privileged access to read sensitive kernel memory contents or trigger a kernel panic, resulting in a denial of service. While the CVSS score of 7.1 reflects a high severity due to the potential for memory corruption and service disruption, the requirement for local access and a specially crafted firmware file limits the attack surface.

Immediate Action: Update the Linux kernel to version 6.6.148, 6.12.101, 6.18.42, 7.1.6, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel-related crashes or unexpected audio driver initialization errors that may indicate attempts to load malicious firmware blobs.

Compensating Controls: Restrict access to firmware loading interfaces and ensure that only trusted, validated firmware files are deployed to the system via secure configuration management practices.

Public Exploit Available: No

Organizations should prioritize patching this vulnerability as part of their standard kernel maintenance cycles. Given that this flaw involves memory handling in the kernel, applying the upstream fixes is the only definitive way to eliminate the risk of out-of-bounds memory access. Ensure that kernel updates are validated in a staging environment before deployment to production systems.