A high-severity integer overflow in the Linux kernel ACPICA subsystem could lead to system-wide compromise or denial of service.

This vulnerability exists within the acpi_ex_opcode_3A_1T_1R function of the ACPICA subsystem. An attacker can trigger an integer overflow by providing specific input that results in a negative size parameter being passed to a memcpy operation, leading to memory corruption.

The vulnerability carries a CVSS score of 8.4, reflecting its potential to cause significant impact on confidentiality, integrity, and availability. Successful exploitation could allow an attacker to execute arbitrary code or cause a system crash, resulting in data loss, unauthorized access to sensitive kernel-level information, or extended service outages.

Immediate Action: Update the Linux kernel to version 6.12.111, 6.18.53, or a later stable release to incorporate the necessary overflow checks.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected segmentation faults that may indicate attempts to trigger memory-related vulnerabilities.

Compensating Controls: Ensure that untrusted users are restricted from interacting with ACPI-related interfaces where possible, as the attack vector requires local access.

Public Exploit Available: No

Given the critical nature of kernel-level vulnerabilities, organizations should prioritize patching their Linux distributions as soon as the updated kernels become available in their respective package repositories. Testing the update in a staging environment is advised to ensure compatibility before deploying to production systems.