Local privilege escalation via unchecked misaligned access

Arbitrary kernel memory access in Linux 6.7 through 6.10.9 on RISC-V allows local users to read and write kernel memory via misaligned accesses. The RISC-V misaligned load and store handlers pass attacker-controlled addresses to raw_copy_from_user() and raw_copy_to_user() without access_ok() validation. An unprivileged local process can trigger the emulation path, exposing kernel data or altering kernel state to gain elevated privileges or crash the host.