A race condition vulnerability in the Linux kernel DRM subsystem could allow a local authenticated attacker to achieve unauthorized system impact.

This is a race condition within the drm_gem_change_handle_ioctl function. It occurs because the old handle remains active in the IDR during the window between unlocking and re-locking the table_lock, requiring low privileges to exploit.

The vulnerability carries a CVSS score of 8.8, reflecting its potential for complete system compromise. Successful exploitation could lead to unauthorized data access, integrity loss, or a total system crash, posing a significant risk to the stability and security of the affected infrastructure.

Immediate Action: Update the Linux kernel to version 6.18.35, 7.0.12, or later stable releases where the fix is implemented.

Proactive Monitoring: Monitor system logs for unexpected kernel oops or crashes that may indicate race condition triggers during graphics driver operations.

Compensating Controls: Restrict access to local system resources and hardware acceleration features to authenticated users only.

Public Exploit Available: No (exploit_available: false)

Given the high severity score, administrators should prioritize patching the Linux kernel during the next scheduled maintenance window. Ensuring the kernel is updated to the provided fixed versions is the only definitive method to eliminate this race condition risk.