A critical memory validation flaw in the Linux kernel RPMI notification buffer allows local attackers to potentially achieve arbitrary code execution or system compromise.

The vulnerability resides in the riscv-sbi-mpxy mailbox driver, where the SBI return value is not validated against the negotiated shared memory size before copying data into the RPMI notification buffer. An attacker can trigger this flaw to perform out of bounds memory operations because the event walker uses an incorrect loop condition.

The vulnerability carries a CVSS score of 8.4, reflecting the potential for complete system compromise. Successful exploitation could lead to unauthorized data access, privilege escalation, and total loss of system integrity or availability. Given the kernel level nature of this flaw, the impact is severe, as it grants attackers control over the core operating system functions.

Immediate Action: Update the Linux kernel to version 6.18.52, 7.2.6, or a later stable release where this issue has been resolved.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected memory access errors that may indicate exploitation attempts.

Compensating Controls: Since this is a local vulnerability, ensure that access to the affected system is strictly limited to authorized personnel to reduce the attack surface.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to system security due to its potential for kernel level exploitation. Organizations should prioritize patching their Linux distributions as soon as the relevant stable kernels are made available by their respective vendors. Testing and deployment of these kernel updates should be conducted immediately to prevent potential exploitation.