A flaw in the Linux kernel SUNRPC subsystem allows for silent memory corruption if percpu counter allocation fails during RPC service startup.

The __svc_create function fails to validate return values for percpu_counter_init, leading to uninitialized pointers and subsequent memory corruption during hot-path operations. This state is reachable only by a local administrator under conditions of severe memory pressure or deliberate fault injection.

Successful exploitation of this vulnerability could lead to system instability, kernel panics, or unpredictable behavior due to memory corruption. While the CVSS score of 8.1 reflects a high severity, the practical risk is significantly mitigated by the requirement for local administrative privileges and specific, high-stress environmental conditions.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or a later stable release where this fix has been integrated.

Proactive Monitoring: Monitor kernel logs for signs of memory allocation failures or unexpected service restarts, particularly in environments utilizing heavy RPC traffic.

Compensating Controls: Ensure that system resources are adequately provisioned to prevent memory exhaustion, as the vulnerability requires memory pressure to trigger the flawed code path.

Public Exploit Available: No (exploit_available: false)

Although the prerequisites for triggering this vulnerability are restrictive, kernel-level memory corruption poses a significant stability risk to enterprise infrastructure. Administrators should prioritize patching the Linux kernel to the identified stable versions as part of their standard maintenance lifecycle to prevent potential system crashes.