A vulnerability in the Linux kernel libnvdimm subsystem allows local attackers to trigger an out-of-bounds memory write, creating a critical risk of system compromise.

The libnvdimm subsystem fails to properly validate the nslot field in DIMM label storage, resulting in a 32-bit integer overflow during bounds checking. This allows an attacker with local, low-privileged access to trigger an out-of-bounds memory write via the ND_CMD_SET_CONFIG_DATA command or malicious hardware media.

This vulnerability poses a significant risk to data integrity and system availability. A successful exploit allows a local attacker to overwrite kernel memory, which can lead to privilege escalation, arbitrary code execution, or system crashes. Given the CVSS score of 7.8, this flaw represents a high-severity risk for any environment utilizing NVDIMM storage solutions.

Immediate Action: Update the Linux kernel to the versions specified in the upstream fix commits, such as 6.12.109, 6.18.50, or 7.2.4, depending on your distribution.

Proactive Monitoring: Audit system logs for unexpected kernel panics or suspicious interactions with the NVDIMM driver and monitor for unauthorized access to hardware configuration interfaces.

Compensating Controls: Restrict access to NVDIMM configuration commands and ensure that only trusted users have the permissions required to interact with DIMM label storage areas.

Public Exploit Available: No

Organizations running Linux systems with NVDIMM hardware should prioritize patching their kernel to the latest stable release. Because this vulnerability involves memory corruption in the kernel space, the potential for privilege escalation is high, necessitating immediate attention to security updates to prevent local attackers from gaining elevated control over the host system.