A memory corruption vulnerability in the Linux kernel panasonic-laptop driver may allow a local authenticated attacker to achieve elevated privileges or system crashes.

This is an array index out-of-bounds vulnerability occurring in the acpi_pcc_retrieve_biosdata function. An authenticated local attacker can trigger this overflow by interacting with the Panasonic laptop platform driver, resulting in memory corruption.

The vulnerability carries a CVSS score of 7.8, indicating high severity. Because the flaw exists within the kernel, successful exploitation could lead to full system compromise, unauthorized data access, or persistent denial of service. Such impacts pose significant risks to organizational infrastructure integrity and data confidentiality.

Immediate Action: Update the Linux kernel to version 7.2.4 or later, or apply the upstream patches provided in the referenced commits.

Proactive Monitoring: Monitor system logs for kernel panics or unexplained crashes related to the platform driver, especially on Panasonic hardware.

Compensating Controls: Restrict local access to the system to authorized users only, as the vulnerability requires local execution privileges to trigger the driver interaction.

Public Exploit Available: Unknown

Given the potential for kernel-level impact, this vulnerability should be prioritized for remediation on all affected Linux systems. Administrators must verify their kernel version and apply the necessary patches immediately to prevent potential local privilege escalation.