A high-severity out-of-bounds read vulnerability in the Linux kernel ISST driver could allow a local authenticated user to compromise system memory confidentiality and availability.

The vulnerability exists within the ISST (Intel Speed Select Technology) interface, where user-provided level inputs are used as array indices without prior validation. By providing an invalid index, a local user with low privileges can trigger an out-of-bounds read, potentially leading to information disclosure or system instability.

Successful exploitation of this vulnerability allows an attacker with local access to read sensitive kernel memory or cause system crashes, resulting in potential denial of service. With a CVSS score of 7.1, this flaw poses a significant risk to the integrity and availability of Linux-based infrastructure, particularly in multi-tenant or shared-hosting environments where local privilege boundaries are critical.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or a later stable release to incorporate the necessary bounds checking logic.

Proactive Monitoring: Monitor system logs for repeated kernel faults or abnormal ioctl activity targeting the platform/x86 ISST interface.

Compensating Controls: Restrict access to local system resources and limit the ability of low-privileged users to execute custom ioctl commands against hardware interfaces where possible.

Public Exploit Available: Unknown

Given that this vulnerability affects core kernel components and provides a path for unauthorized memory access, organizations should prioritize patching as part of their regular kernel maintenance cycle. Administrators should verify their distribution's upstream status and apply the identified kernel fixes immediately to mitigate the risk of local privilege escalation or system disruption.