A vulnerability in the Linux kernel KVM subsystem for s390 architecture could allow local authenticated attackers to achieve privilege escalation or system compromise.

This is a memory management flaw occurring during PCI AIF enablement in the KVM s390 subsystem. The issue arises when a guest registers IRQs without a summary bit, leading to incorrect AISB location handling. This requires local access with low privileges to trigger.

The vulnerability carries a CVSS score of 8.8, reflecting its potential for complete system compromise. Successful exploitation could allow an attacker with local access to gain elevated privileges, bypass security boundaries, or cause system instability, resulting in significant operational downtime or data exposure.

Immediate Action: Update the Linux kernel to version 6.1.178, 6.6.145, 6.12.97, 6.18.40, or the latest available stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unusual kernel panic events or KVM-related errors that may indicate exploitation attempts.

Compensating Controls: Restrict local access to systems running affected kernel versions and ensure that guest virtual machines are isolated using strong hypervisor-level security policies.

Public Exploit Available: No (unknown)

Given the high CVSS score and the critical nature of kernel-level vulnerabilities, organizations should prioritize patching affected infrastructure. Apply the recommended kernel updates as part of standard maintenance cycles to prevent potential privilege escalation.