A memory safety flaw in the Linux kernel ACPI processor driver could allow an attacker with local access to trigger a system crash or potentially execute unauthorized operations.

The vulnerability stems from improper validation of ACPI MADT (Multiple APIC Description Table) and _MAT (Method Additional Table) record lengths. An attacker with local access can exploit this via unauthenticated interaction with the kernel to cause memory corruption or denial of service conditions.

Successful exploitation of this vulnerability primarily impacts system availability, potentially leading to kernel panics and unexpected system reboots. While the CVSS score of 7.3 reflects a High severity due to the potential for local denial of service, the requirement for local access limits the immediate threat surface in well-defended environments. However, in multi-tenant or shared infrastructure, this flaw could be leveraged to disrupt critical services.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, 6.6.157, or later as appropriate for your distribution.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected system instability, which may indicate attempted exploitation of ACPI parsing routines.

Compensating Controls: Restrict local access to the system, and utilize kernel hardening features such as Lockdown mode to limit the ability of unauthorized local users to interact with sensitive kernel interfaces.

Public Exploit Available: No (exploit_available: false)

Organizations should prioritize patching this vulnerability as part of regular kernel maintenance cycles. Given the potential for system-level disruption, testing the update in a staging environment is recommended before deploying to production servers to ensure compatibility with existing hardware configurations.