A high severity out of bounds memory access vulnerability in the Linux kernel fp9931 regulator driver could allow a local attacker to compromise system integrity and availability.

The vulnerability is caused by an improperly sized VPOSNEG_table in the fp9931 regulator driver, which leads to out of bounds memory access when handling specific voltage selector values. This flaw can be triggered by a local attacker with no special privileges (AV:L/PR:N).

The exploitation of this vulnerability can lead to system instability, denial of service, or potential local privilege escalation. Given the CVSS score of 8.4, this issue represents a significant risk to the availability and confidentiality of the host operating system, especially in environments where unprivileged users have access to the system.

Immediate Action: Update the Linux kernel to version 7.1.10 or later, as this version contains the corrected voltage selector table mapping.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults related to the fp9931 regulator driver, which may indicate attempted exploitation.

Compensating Controls: If immediate patching is not feasible, restrict access to the system to authorized users only and, where possible, blacklist the vulnerable fp9931 kernel module if it is not required for hardware operations.

Public Exploit Available: Unknown

This vulnerability presents a high risk due to the potential for kernel level memory corruption. IT administrators should prioritize patching the Linux kernel to version 7.1.10 or higher across all affected systems to eliminate the risk of out of bounds memory access and maintain overall system stability.