A vulnerability in the Linux kernel BPF JIT compiler allows local attackers to trigger memory corruption and kernel panics, posing a high risk to system stability and integrity.

This flaw exists in the BPF x86 JIT compiler where the REX prefix is incorrectly generated for per-CPU address resolution instructions. This causes the compiler to resolve addresses to the wrong registers, leading to unintended memory dereferences that can be triggered by a local, authenticated user with sufficient privileges to load BPF programs.

Successful exploitation of this vulnerability allows an attacker to cause a kernel panic, leading to immediate system denial of service. Furthermore, because the instruction incorrectly resolves memory addresses, it may allow for unauthorized read or write operations within kernel memory space, potentially compromising sensitive data or facilitating privilege escalation. The CVSS score of 7.8 reflects the high severity of this local privilege escalation and integrity risk.

Immediate Action: Update the Linux kernel to the patched versions: 6.12.109, 6.18.50, or 7.2.4.

Proactive Monitoring: Monitor system logs for kernel BUG messages or unexpected page faults associated with BPF execution.

Compensating Controls: Restrict access to the bpf() system call to administrative users or highly trusted processes to prevent unprivileged BPF program loading.

Public Exploit Available: No confirmed public exploit exists.

Given the potential for kernel-level memory corruption and system instability, this vulnerability should be prioritized for remediation on all affected Linux infrastructure. Administrators must verify their current kernel version and apply the upstream patches provided by the Linux kernel stable repository as soon as possible.