A high-severity kernel stack corruption vulnerability in the Linux kernel may allow local authenticated users to compromise system integrity and availability.

The vulnerability arises from an incorrect tailcall jump offset calculation in the RISC-V BPF implementation when CFI_CLANG is enabled. This error causes the kernel to skip necessary stack pointer adjustments, leading to memory corruption that can be triggered by a local attacker with low privileges.

Successful exploitation of this flaw allows an attacker with local access to corrupt the kernel stack, which typically results in a system crash or potential arbitrary code execution with kernel-level privileges. Given the CVSS score of 7.8, this vulnerability poses a significant risk to the confidentiality, integrity, and availability of affected systems. Organizations running Linux on RISC-V architecture are advised to prioritize remediation to prevent unauthorized system access or denial of service.

Immediate Action: Update the Linux kernel to version 6.18.52, 7.2.6, or a later stable release where this issue is resolved.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected process terminations that may indicate exploitation attempts.

Compensating Controls: If patching is not immediately feasible, consider disabling the BPF JIT compiler or restricting access to BPF-related system calls for unprivileged users.

Public Exploit Available: Unknown.

This vulnerability represents a critical risk to system stability and security. Administrators must apply the provided kernel patches as part of their standard update cycle to remediate the underlying logic error. Failure to update leaves systems vulnerable to local privilege escalation and service disruption.