A critical out-of-bounds memory access vulnerability in the Linux kernel zisofs filesystem driver enables potential system compromise or denial of service by unauthenticated local or remote attackers.

This is an out-of-bounds read and memory corruption vulnerability in the zisofs_uncompress_block function. It occurs when handling compressed ISO9660 filesystem images containing malicious Rock Ridge records, allowing an attacker to trigger a slab-out-of-bounds access during file read operations.

Successful exploitation of this flaw can lead to a kernel panic, resulting in system instability and denial of service. Furthermore, as the vulnerability involves out-of-bounds memory access, it may be leveraged to achieve arbitrary code execution or privilege escalation, posing a severe risk to data confidentiality and system integrity. With a CVSS score of 9.8, this vulnerability is classified as critical due to the ease of trigger and the potential for full system compromise.

Immediate Action: Update the Linux kernel to version 5.15.221, 6.1.188, 6.6.157, 6.12.110, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops, KASAN reports, or unexpected system crashes specifically related to filesystem operations or ISO mounting.

Compensating Controls: Restrict the ability of untrusted users to mount arbitrary ISO9660 images on sensitive systems and ensure that filesystems are mounted with the 'nosuid' and 'nodev' options where possible to limit the impact of potential exploits.

Public Exploit Available: Unknown.

Given the critical severity and the nature of kernel-level memory corruption, organizations should prioritize patching affected Linux distributions immediately. Ensure that automated patch management processes are configured to capture these kernel updates, and perform reboots as necessary to apply the security fixes to the running kernel memory.