A high-severity input validation flaw in the Linux kernel hwmon driver could allow a local attacker to perform out-of-bounds register access, leading to privilege escalation or system instability.

The vulnerability occurs in the nct6775-core driver, which fails to properly validate the number of pulse-width modulation channels. A low-privileged local attacker can leverage this to read or write to unsupported hardware registers.

The ability to interact with hardware registers can be a precursor to more severe attacks, including privilege escalation. The CVSS score of 7.8 reflects the high potential for system compromise, and organizations should treat this with urgency to protect against unauthorized system control.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, or 7.1.8 to incorporate the necessary register access bounds checking.

Proactive Monitoring: Monitor for unusual hardware driver activity or unexpected system behavior following user-initiated hardware interactions.

Compensating Controls: Disable unnecessary kernel modules and restrict user access to hardware management interfaces to minimize the attack surface.

Public Exploit Available: No

Administrators should prioritize updating kernel packages to the versions specified. Ensuring that hardware-interfacing drivers are kept up to date is a fundamental step in maintaining overall system security and integrity.