A memory management flaw in the Linux kernel hinic3 driver allows a local, authenticated attacker to potentially cause system instability or unauthorized information disclosure.

The vulnerability is a descriptor mismatch error triggered during TX offload processing in the hinic3 driver. An attacker with low-level local access can trigger out-of-bounds DMA reads or IOMMU faults by forcing the kernel to handle malformed tunnel packets that cause incorrect fragment count caching.

The impact of this vulnerability includes potential system crashes and the exposure of sensitive kernel memory. Given the CVSS score of 7.1, this represents a significant risk for systems utilizing the affected hardware driver, as an attacker could leverage this to facilitate a denial of service or potentially bypass kernel-level protections.

Immediate Action: Update the Linux kernel to version 6.18.52, 7.2.6, or 7.3-rc1 and later to implement the required fix in the hinic3 driver.

Proactive Monitoring: Monitor system logs for IOMMU faults or kernel panic events that may indicate attempts to trigger driver-level memory corruption.

Compensating Controls: Restrict local access to the affected hardware systems to prevent unauthorized users from interacting with the vulnerable kernel driver interface.

Public Exploit Available: No

This vulnerability presents a moderate to high risk to system stability and integrity. Administrators should prioritize patching the kernel to the recommended versions to eliminate the risk of out-of-bounds DMA access and ensure that corrupted checksum packets are correctly rejected by the driver.