A high-severity memory corruption vulnerability in the Linux kernel packet module could allow a local attacker to trigger out-of-bounds writes and potentially escalate privileges.

The issue occurs because the kernel reads device header lengths inconsistently during socket buffer allocation and construction. A local attacker can exploit this race condition during concurrent device reconfiguration to force the kernel to perform an out-of-bounds write, overwriting adjacent memory.

This vulnerability has a CVSS score of 7.8, indicating high severity. Successful exploitation allows a local attacker to corrupt kernel memory, which can be leveraged for privilege escalation or to crash the system, potentially resulting in unauthorized access to sensitive kernel-space data.

Immediate Action: Update the Linux kernel to version 5.10.267, 5.15.218, 6.1.185, 6.6.152, or newer.

Proactive Monitoring: Review system audit logs for unauthorized attempts to reconfigure network devices or suspicious socket activity.

Compensating Controls: Limit user access to raw socket creation and network device management to reduce the likelihood of a local attacker triggering the race condition.

Public Exploit Available: Unknown

Given the risk of privilege escalation through memory corruption, organizations should treat this as a high-priority update. Patching the kernel will resolve the inconsistency in header length handling and prevent the potential for out-of-bounds writes.