A high severity vulnerability in the Linux kernel allows local authenticated users to potentially trigger memory access errors, leading to information disclosure or denial of service.

The function hdac_hdmi_set_pin_port_mux fails to properly validate an enum value before using it as an index for the texts array. This flaw requires a local attacker with low privileges to interact with the sound subsystem to potentially read memory outside the array bounds.

While the CVSS score is 7.1, the impact is primarily localized to the system where the kernel is running. Successful exploitation could lead to unauthorized information disclosure or a kernel panic resulting in system downtime. Organizations relying on Linux systems for critical infrastructure should prioritize patching to maintain system stability and data confidentiality.

Immediate Action: Update the Linux kernel to version 5.15.212, 6.1.178, 6.6.145, 6.12.97, or later to incorporate the necessary input validation checks.

Proactive Monitoring: Monitor system logs for unexpected kernel oops or crashes that may indicate attempts to trigger memory access violations within audio driver components.

Compensating Controls: Restrict access to sound hardware and related system interfaces to only authorized users to minimize the attack surface available to low privileged accounts.

Public Exploit Available: No

Given the potential for kernel level impact, administrators should schedule kernel updates as part of their regular patch management cycle. Prioritize systems where untrusted users have local access, as this is a prerequisite for exploiting this specific vulnerability. Verify the updated kernel version post installation to ensure the fix is active.