A memory corruption vulnerability in the Linux kernel nzxt-smart2 driver may allow a local authenticated attacker to compromise system integrity and availability.

The vulnerability involves incorrect DMA alignment of the output buffer within the nzxt-smart2 hardware monitoring driver. An attacker with local access and low privileges can trigger this flaw during HID output report generation, potentially leading to memory corruption.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation allows a local user to cause a system crash, resulting in denial of service, or potentially execute arbitrary code with elevated privileges, leading to a total system compromise.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, 7.1.8, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic events related to the nzxt-smart2 driver or HID subsystem.

Compensating Controls: Restrict local access to the system and minimize the number of users with permissions to interact with hardware monitoring interfaces.

Public Exploit Available: No

Given the potential for local privilege escalation and system instability, administrators should prioritize kernel updates across all affected environments. Apply the recommended patches immediately to address the underlying memory management defect.