A heap-based buffer overflow in the Linux kernel s390 qeth driver could allow a local attacker to execute arbitrary code or cause a system crash.

This vulnerability is a heap-based buffer overflow in the qeth_snmp_command and qeth_l3_arp_query functions. It occurs because the kernel fails to validate the minimum size of a user-supplied buffer, leading to integer underflow during bounds checking and subsequent memory corruption. The attacker must have local access to the system to trigger these ioctls.

A successful exploitation of this vulnerability could lead to privilege escalation, unauthorized access to sensitive kernel memory, or a complete system failure. Given the CVSS score of 8.4, this flaw presents a significant risk, particularly in multi-tenant environments or systems where local user accounts are provisioned. The potential for arbitrary code execution within the kernel context makes this a high-priority remediation item.

Immediate Action: Update your Linux kernel to the versions specified in the OSV enrichment data (e.g., 5.10.266, 5.15.217, 6.1.184, or 6.6.153) or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults that may indicate failed exploitation attempts targeting the qeth driver.

Compensating Controls: Restrict access to ioctl calls and sensitive kernel interfaces for non-privileged users using Linux Security Modules (LSMs) like SELinux or AppArmor.

Public Exploit Available: Unknown

Organizations utilizing Linux on s390 architecture should prioritize patching this kernel vulnerability during their next scheduled maintenance window. Because this flaw allows for kernel-level memory corruption, failure to patch could result in full system compromise by local attackers. Apply the kernel updates provided by your distribution maintainer as soon as they become available.