A memory safety flaw in the Linux kernel nilfs2 file system allows local users with low privileges to trigger a slab-out-of-bounds access, potentially leading to system compromise.

The vulnerability occurs when a B-tree mapping collapses into a direct mapping during file truncation, leaving an orphaned intermediate node block in the cache. A local authenticated attacker can trigger this state, causing the kernel to process the orphaned node as a direct mapping entry, resulting in a slab-out-of-bounds memory access.

Successful exploitation of this vulnerability can result in a kernel panic, leading to denial of service, or potentially allow an attacker to escalate privileges by corrupting kernel memory. Given the CVSS score of 7.8, this represents a high-severity risk to system integrity and availability, particularly in multi-tenant environments or systems where untrusted users have local access.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel oops or KASAN-related error reports which may indicate attempts to trigger memory-related vulnerabilities.

Compensating Controls: Restrict access to the system to only authorized users, and implement kernel hardening measures such as disabling unnecessary file system drivers if they are not required for system operation.

Public Exploit Available: exploit_available (false)

This vulnerability presents a significant risk to kernel stability and security. Administrators should prioritize patching the Linux kernel across all affected production environments to eliminate the risk of memory corruption and potential privilege escalation. Ensure that maintenance windows are scheduled to apply these critical updates as soon as they are integrated into your distribution's stable release channels.