An integer truncation vulnerability in the Linux kernel s390/dasd driver could allow a local authenticated attacker to trigger a buffer overflow, potentially leading to privilege escalation or system instability.

The vulnerability stems from the incorrect declaration of the fmt_buffer_size variable as an integer, leading to silent truncation when calculating buffer requirements. A local attacker with low privileges can control the track range, forcing an undersized memory allocation that results in a heap-based buffer overflow during subsequent operations.

Successful exploitation of this flaw could allow a local user to execute arbitrary code with kernel-level privileges or cause a system-wide denial of service. Given the CVSS score of 7.8, this represents a significant risk to system integrity and availability, particularly in environments where multi-tenant access or untrusted local users are present.

Immediate Action: Update your Linux kernel to the corrected versions provided by your distribution vendor: 6.6.151, 6.12.103, 6.18.44, or 7.1.8.

Proactive Monitoring: Monitor system logs for kernel panic events or memory allocation errors occurring within the s390/dasd driver subsystem.

Compensating Controls: Restrict access to the affected s390/dasd device management interfaces to highly privileged administrative accounts only to minimize the attack surface.

Public Exploit Available: Unknown.

This vulnerability presents a high risk to Linux environments utilizing s390 architecture. Administrators should prioritize patching the kernel to the versions listed above as part of their standard maintenance cycle to prevent potential local privilege escalation. In environments where immediate patching is not feasible, restrict local access to the affected hardware management interfaces.