A critical out-of-bounds read vulnerability in the Linux kernel segment routing implementation poses a severe risk of system instability or potential information disclosure.

The flaw exists in the seg6 module where the IPv6 control block is not properly reset after decapsulation. An unauthenticated attacker can exploit this by injecting crafted IPv6 packets containing specific extension headers, causing the kernel to read memory beyond the allocated buffer.

The vulnerability carries a CVSS score of 9.8, reflecting its potential for severe impact. Successful exploitation can lead to kernel-level memory corruption, which may result in a system crash (denial of service) or the unauthorized exposure of sensitive kernel memory contents. Given the critical nature of the Linux kernel in production environments, this represents a significant threat to infrastructure availability and data confidentiality.

Immediate Action: Update your Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panic events or KASAN-related error reports which may indicate attempted exploitation of memory safety flaws.

Compensating Controls: Implement network-level filtering to restrict untrusted traffic from reaching segment routing endpoints, as the vulnerability requires specific packet structures to trigger.

Public Exploit Available: Unknown.

This is a critical vulnerability that directly impacts the core integrity of the operating system. Administrators must prioritize patching the kernel across all affected environments immediately to eliminate the risk of remote kernel-level exploitation. Ensure that testing is performed in staging environments to verify compatibility with existing network configurations before deploying the update to production systems.