A high-severity heap out-of-bounds vulnerability in the Linux kernel RISC-V KVM subsystem allows a local authenticated attacker to potentially execute arbitrary code or cause a system crash.

The vulnerability arises from an integer overflow in the SBI PMU EVENT_GET_INFO handler, where a guest-controlled value causes an undersized memory allocation. This discrepancy allows an attacker with low privileges to perform out-of-bounds read and write operations, as demonstrated by KASAN reports in nested guest environments.

The vulnerability carries a CVSS score of 8.8, reflecting its potential for complete system compromise. Successful exploitation could allow a malicious actor to escape a virtualized environment, gain elevated privileges on the host system, or disrupt critical services, leading to significant system downtime or data loss.

Immediate Action: Update the Linux kernel to version 7.2.4 or later, or apply the upstream fixes referenced in the kernel stable git repository.

Proactive Monitoring: Monitor kernel logs for KASAN (Kernel Address Sanitizer) alerts or unexpected system crashes that may indicate exploitation attempts within the virtualization subsystem.

Compensating Controls: Restrict access to KVM-based virtualization features to trusted users only, and implement strict guest isolation policies to minimize the potential impact of a breakout.

Public Exploit Available: Unknown.

Given the potential for privilege escalation and cross-guest interference, this vulnerability should be treated with high urgency. System administrators managing RISC-V KVM environments must prioritize the application of the patched kernel versions to prevent unauthorized system access and maintain the integrity of the virtualization host.