A memory management vulnerability in the Linux kernel crypto driver could lead to system instability or potential memory corruption.

This is a memory handling flaw within the sg_cleanup error path, where an incorrect loop index leads to failed DMA buffer unmapping. The vulnerability is exploitable by an unauthenticated attacker capable of triggering specific crypto operations.

The vulnerability carries a CVSS score of 10.0, indicating a critical severity level. Successful exploitation could lead to kernel-level memory corruption, potentially resulting in system crashes, denial of service, or unauthorized access to sensitive data processed by the kernel.

Immediate Action: Update the Linux kernel to the versions specified in the fixed packages list (5.10.261, 5.15.212, 6.1.178, 6.6.145 or later).

Proactive Monitoring: Monitor system logs for kernel panics or repeated error messages related to DMA or crypto subsystem operations.

Compensating Controls: Implement strict network segmentation and firewall rules to limit interaction with services utilizing the affected crypto drivers.

Public Exploit Available: Unknown

Given the critical CVSS severity and the potential for kernel-level impact, administrators should prioritize patching the Linux kernel across all affected environments. Testing the update in a staging environment prior to full deployment is recommended to ensure compatibility.