A flaw in the Linux kernel vhost-scsi component permits a local attacker to cause a system-wide denial of service through kernel memory corruption.

The vhost-scsi driver fails to properly validate feature bit changes after an endpoint has been established, leading to an inconsistent state where command pools are not rebuilt. An authenticated local user can exploit this to trigger a null pointer dereference or memory corruption during I/O operations, resulting in a kernel panic.

Successful exploitation of this vulnerability results in a system crash, causing unplanned downtime for critical infrastructure relying on the affected Linux kernel. While the attack requires local access, the potential for system-wide instability and denial of service warrants prompt attention, especially in high-availability virtualized environments. The CVSS score of 8.8 reflects the high severity of the impact, as the flaw allows for significant disruption to system availability.

Immediate Action: Update the Linux kernel to version 6.18.45, 7.1.9, or 7.2 and later as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel BUG_ON triggers or recurring vhost-scsi related call traces that may indicate attempts to manipulate feature bits.

Compensating Controls: Restrict access to the vhost-scsi interface and ensure that only trusted users have the necessary privileges to interact with kernel-level storage configurations.

Public Exploit Available: Unknown

Given the potential for system instability and kernel-level disruption, administrators should prioritize patching affected Linux kernels during the next maintenance cycle. Although the attack vector is restricted to local authenticated users, the criticality of the kernel subsystem necessitates that the provided fixes are applied to prevent unauthorized service termination and maintain overall system reliability.