A vulnerability in the Linux kernel PTP OCP driver allows a local authenticated attacker to trigger an out-of-bounds memory read, potentially resulting in sensitive information disclosure or system instability.

The vulnerability exists because the EEPROM board ID is a fixed 13-byte field that may lack a NUL terminator. When passed to the devlink_info_version_fixed_put function, it is treated as a C string, which can cause the system to read memory beyond the intended buffer bounds.

The CVSS score of 7.1 indicates a high severity risk. While this vulnerability requires local access, an attacker who has obtained low-level privileges can exploit this flaw to read kernel memory or cause a denial of service. This may lead to the compromise of sensitive data residing in kernel space or result in unplanned system downtime, disrupting business operations.

Immediate Action: Administrators should update the Linux kernel to versions 6.1.183, 6.6.152, 6.12.104, or 6.18.45, where this issue has been resolved.

Proactive Monitoring: Security teams should monitor system logs for kernel panics or unexpected memory access errors that may indicate exploitation attempts.

Compensating Controls: Restrict local system access to authorized personnel only and enforce strict privilege management to minimize the likelihood of an attacker gaining the local access required to trigger this vulnerability.

Public Exploit Available: Unknown

The vulnerability represents a clear risk to kernel integrity and data confidentiality. It is recommended that IT departments prioritize the deployment of the provided kernel patches during the next scheduled maintenance window. Ensuring that kernel versions are current is the most effective method to eliminate this memory safety issue and prevent potential exploitation.