A memory corruption vulnerability in the Linux kernel dm-integrity module could allow a local attacker with low privileges to achieve privilege escalation or system instability.

The vulnerability is a heap-based buffer overflow occurring when the tag size is smaller than the digest size in the dm-integrity driver. This allows data to be written past the bounds of the allocated buffer, which can be triggered by a local attacker with low privileges.

The CVSS score of 7.8 indicates a high severity risk. Successful exploitation could lead to full system compromise, including unauthorized access to sensitive data or a complete denial of service through kernel panic. Given that this resides within the core kernel, the potential for widespread impact on enterprise Linux environments is significant.

Immediate Action: Update your Linux kernel to version 7.3-rc2 or later, or apply the relevant stable branch patches provided in the upstream git references.

Proactive Monitoring: Monitor system logs for kernel oops messages or unexpected reboots that may indicate memory corruption events.

Compensating Controls: Restrict local access to the system to trusted users only, as the vulnerability requires local access to the kernel interface to trigger.

Public Exploit Available: No (exploit_available: false)

The risk posed by this buffer overflow is substantial due to its potential for privilege escalation within the kernel. System administrators should prioritize testing and deploying the identified kernel patches across all affected server and workstation environments to prevent local attackers from exploiting this memory safety flaw.