A memory management unit mismatch in the RISC-V Linux kernel can lead to system-wide instability and kernel warnings during boot.

This is a memory alignment vulnerability within the RISC-V architecture code, specifically involving the vmemmap_start_pfn calculation. The flaw allows a local, authenticated attacker to trigger kernel warnings and potential system crashes by exploiting the unit mismatch between physical address alignment and folio storage bytes.

The vulnerability carries a CVSS score of 7.8, indicating a high level of risk for systems utilizing the RISC-V architecture. Successful exploitation could result in denial of service through kernel panics or instability, potentially causing significant downtime for critical infrastructure or embedded devices relying on the Linux kernel.

Immediate Action: Update the Linux kernel to version 7.1.8 or later, as these versions contain the necessary fixes for the memory alignment logic.

Proactive Monitoring: Monitor system logs for kernel warnings, specifically those referencing mm/sparse.c or memory initialization failures, which may indicate an attempt to trigger or encounter this flaw.

Compensating Controls: Ensure that systems are running with verified hardware configurations and restricted local access, as this vulnerability requires local, authenticated access to the system to manifest.

Public Exploit Available: Unknown

Given the potential for system-wide instability, organizations running Linux on RISC-V hardware should prioritize updating their kernel to version 7.1.8. While the vulnerability requires local access, the nature of the impact on system uptime warrants immediate attention to ensure kernel stability and reliability.