A high severity memory corruption vulnerability in the Linux kernel could allow a local attacker to achieve an out of bounds write, potentially leading to system instability or privilege escalation.

The vulnerability exists in the mm/pagewalk component where an incorrect handling of the walk action state leads to a stale ACTION_AGAIN value. This state error, when combined with concurrent page table operations, results in duplicate walk callbacks and an out of bounds write within the kernel memory space.

This vulnerability poses a significant risk to the integrity and availability of Linux based systems. While the attack vector is local (requiring low privileges), the potential for memory corruption allows an attacker to manipulate kernel state, which can be leveraged for unauthorized privilege escalation or arbitrary code execution, resulting in full system compromise. The CVSS score of 7.8 reflects the high impact on confidentiality, integrity, and availability once the attacker has established local access.

Immediate Action: Update the Linux kernel to version 6.18.50, 7.2.4, or later versions where this race condition has been addressed.

Proactive Monitoring: Monitor system logs for kernel panics or KASAN reports that may indicate memory corruption events or suspicious local process activity.

Compensating Controls: Restrict local access to authorized users only and implement kernel hardening measures, such as disabling unprivileged user namespaces, to reduce the attack surface for local exploits.

Public Exploit Available: Unknown.

Given the severity of memory corruption vulnerabilities in the kernel, administrators should prioritize patching affected systems in their next maintenance cycle. Although local access is required, the risk of privilege escalation is substantial. Apply the provided kernel updates to ensure the stability and security of the operating environment.