A critical out-of-bounds write vulnerability in the Linux kernel IPVS module allows a local, low-privileged attacker to achieve full system compromise or denial of service.

This flaw exists in the ip_vs_nat_icmp function, where inconsistent reading of the IP header length (ihl) field allows an attacker to manipulate packets during IPVS processing. An authenticated local user can trigger an out-of-bounds write, potentially leading to arbitrary code execution or kernel panic.

The potential for kernel-level memory corruption poses a significant threat to data integrity and system availability. Given the CVSS score of 7.8, this vulnerability is classified as High severity, as it enables a local attacker to escalate privileges or crash critical infrastructure services relying on IPVS for load balancing.

Immediate Action: Administrators must update the Linux kernel to version 6.1.183, 6.6.152, 6.12.104, or later, as these releases contain the necessary patches to sanitize header length validation.

Proactive Monitoring: Security teams should monitor system logs for frequent kernel panics or unexpected process crashes that may indicate exploitation attempts against the IPVS module.

Compensating Controls: Restrict access to the system to only trusted users to minimize the risk of a local attacker executing the exploit code, as the vulnerability requires local access.

Public Exploit Available: Unknown.

The severity of this vulnerability necessitates immediate attention for all systems utilizing IPVS for network load balancing. Administrators should prioritize the kernel update across all affected production environments to eliminate the risk of local memory corruption and potential system-wide compromise.