A memory management flaw in the Linux kernel OMAP SSI driver could allow a local attacker to cause a system crash or trigger restricted memory access patterns.

The vulnerability stems from a failure to initialize the DMA mask for the synthetic HSI controller device in the OMAP SSI driver, which bypasses standard device initialization paths. A local authenticated attacker with low privileges can trigger this flaw by initiating DMA mapping operations, potentially resulting in kernel-level instability or denial of service.

The potential for kernel-level crashes poses a significant risk to system availability and stability for affected infrastructure. Given the CVSS score of 7.8, this vulnerability is classified as high severity because, while it requires local access, it enables an attacker to compromise the integrity and availability of the underlying operating system.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or a later stable release where the DMA mask initialization logic has been corrected.

Proactive Monitoring: Monitor system logs for kernel oops, panic messages, or unusual driver-related errors that may indicate exploitation attempts against the SSI controller.

Compensating Controls: Restrict local system access to authorized personnel only and implement kernel hardening configurations, such as disabling unnecessary modules, to reduce the attack surface.

Public Exploit Available: No

This vulnerability represents a significant risk to kernel stability and should be addressed through standard patch management cycles. Organizations utilizing the OMAP SSI driver on Linux systems must prioritize upgrading to the specified patched kernel versions to prevent potential local exploitation and system instability.