A memory safety flaw in the Linux kernel drm/log subsystem allows a local attacker to trigger an out-of-bounds read, potentially leading to information disclosure or system instability.

This is an out-of-bounds read vulnerability (CWE-125) occurring within the drm_log_draw_kmsg_record function. The flaw arises because an unsigned integer length variable is not validated before subtraction, allowing an attacker with local low-privileged access to cause a pointer wrap and read memory outside the intended buffer.

Successful exploitation of this vulnerability can result in unauthorized memory access, leading to the disclosure of sensitive kernel data or a system crash. Given the CVSS score of 7.1, this is classified as a high-severity issue because it compromises the confidentiality and availability of the underlying operating system. While the attack requires local access, it provides a significant pathway for privilege escalation or sensitive data leakage in multi-user or containerized environments.

Immediate Action: Update the Linux kernel to version 6.18.46, 7.1.10, or a later stable release where this fix has been incorporated.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected memory access errors that may indicate exploitation attempts.

Compensating Controls: Restrict access to the system to authorized users only, as the vulnerability requires local execution privileges to trigger the flaw.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to the integrity of the Linux kernel. System administrators should prioritize testing and deploying the provided kernel patches to their production environments immediately to prevent potential local exploitation.