A high severity memory access vulnerability in the Linux kernel s390/zcrypt subsystem could allow a local authenticated attacker to read or modify sensitive heap memory.

The vulnerability exists in the s390/zcrypt driver due to an incorrect upper limit check for the domain value when processing EP11 CPRBs. This flaw allows a local user with low privileges to trigger an out of bounds memory access when interacting with custom device nodes.

The potential for unauthorized access to heap memory poses a significant risk to system integrity and confidentiality. While the CVSS score of 7.8 reflects a high severity rating, the requirement for local authenticated access limits the immediate threat landscape to users already present on the system. However, successful exploitation could lead to privilege escalation or the disclosure of sensitive cryptographic material, resulting in full system compromise.

Immediate Action: Update the Linux kernel to version 6.1.183, 6.6.151, 6.12.103, 6.18.44, or later. Organizations should prioritize patching systems that utilize s390 crypto card interfaces.

Proactive Monitoring: Review system logs for unusual kernel crashes or attempts to access restricted device nodes related to the zcrypt subsystem.

Compensating Controls: Restrict access to the affected device nodes to only necessary users or processes to prevent unauthorized interaction with the vulnerable driver.

Public Exploit Available: Unknown.

Given the potential for memory corruption and the critical nature of kernel level security, administrators should apply the provided kernel patches as part of their next scheduled maintenance cycle. While local access is required, the risk of privilege escalation warrants prompt attention to ensure the continued security of the underlying infrastructure.