A memory corruption vulnerability in the Linux kernel coreboot driver may allow a local attacker to perform unauthorized memory reads or trigger a denial of service.

The vulnerability is an improper input validation flaw within the coreboot table parsing logic. An attacker can provide a malformed table that triggers an integer overflow or references memory outside of authorized resource bounds, leading to out-of-bounds memory access.

Successful exploitation allows a local attacker to potentially access sensitive information residing in kernel memory or crash the system, resulting in a denial of service. While the CVSS score of 7.7 reflects a high severity, the requirement for local access limits the immediate threat landscape to users or processes already present on the host system.

Immediate Action: Apply the latest security updates provided by your Linux distribution or update the kernel to version 5.10.270, 5.15.221, 6.1.188, 6.6.157, or later.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected memory access errors that may indicate exploitation attempts.

Compensating Controls: Restrict local access to the system and ensure that only trusted users have the ability to interact with hardware-level interfaces or load kernel modules.

Public Exploit Available: Unknown

Given the potential for kernel-level memory corruption, administrators should prioritize patching the Linux kernel across all affected environments. While local access is required for exploitation, the severity of the potential impact necessitates prompt application of the upstream fixes to maintain system integrity and stability.