A race condition vulnerability in the Linux kernel mpu3050 gyroscope driver affects multiple stable kernel branches and allows local attackers to compromise system integrity and confidentiality.

This flaw is a race condition caused by incorrect ordering of the iio_device_register function within the mpu3050 driver probe routine. The attacker requires local access with low privileges to trigger the condition.

A successful exploitation of this race condition can lead to full system compromise, allowing an attacker to gain elevated privileges, execute arbitrary code, and access sensitive data. The high CVSS score of 7.8 reflects the severity of potential local privilege escalation and complete loss of operating system control.

Immediate Action: Update the Linux kernel to version 5.10.253, 5.15.203, 6.1.168, 6.6.134, or later where the fix has been applied.

Proactive Monitoring: Monitor system logs for kernel panics, unexpected driver reloads, or unusual process execution patterns associated with local privilege escalation attempts.

Compensating Controls: Restrict local shell access and apply strict user permission controls to limit which users can interact with hardware sub-systems or load kernel modules.

Public Exploit Available: unknown

Administrators must prioritize updating vulnerable kernel packages across all affected Linux distributions to prevent local privilege escalation. Applying the official kernel patches removes the race condition window during driver initialization.