A memory management vulnerability in the Linux kernel DRM/VC4 driver could be exploited by a local attacker to achieve privilege escalation or system instability.

This is a memory management flaw occurring in the vc4_overflow_mem_work function, where the system incorrectly supplies the total bin BO size instead of the specific overflow slot size to the BPOS register. The CVSS vector (AV:L/AC:L/PR:L) indicates that an attacker must have local access and low-level privileges to trigger the flaw.

Successful exploitation of this vulnerability allows an attacker with local access to corrupt kernel memory. This may lead to a full system compromise, unauthorized data access, or denial of service, which significantly impacts operational continuity and data integrity. The CVSS score of 7.8 confirms the high severity of this flaw, primarily due to the potential for complete system control.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, or 7.1.8, depending on your current branch.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected memory access errors that may indicate exploitation attempts.

Compensating Controls: Restrict local access to the system to only authorized personnel to prevent the exploitation of local privilege escalation vulnerabilities.

Public Exploit Available: Unknown

Given the potential for high-impact local privilege escalation, administrators should prioritize kernel updates across all affected environments. Applying the provided stable patches is the only reliable method to eliminate this memory corruption risk.