A race condition vulnerability in the Linux kernel Broadcom BDC UDC driver allows a local attacker to achieve potential code execution or system instability.

The vulnerability exists because the BDC UDC driver does not release its interrupt handler before freeing memory resources during device removal. A local attacker with low privileges can trigger a race condition where the interrupt handler accesses freed or null memory, leading to a system crash or arbitrary code execution.

A successful exploit allows a local attacker to compromise the integrity and availability of the host system. Given the CVSS score of 7.8, this flaw represents a significant risk, as it could lead to full system compromise or denial of service on affected hardware utilizing the Broadcom BDC driver.

Immediate Action: Update your Linux kernel to the versions specified in the OSV fixed packages list (e.g., 5.10.266, 5.15.216, 6.1.183, or 6.6.148) or higher.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages that occur during USB device removal or hardware teardown processes.

Compensating Controls: Restrict local access to systems containing the affected Broadcom BDC hardware to prevent unauthorized users from triggering the race condition.

Public Exploit Available: No

The vulnerability presents a high risk to system stability and security. Administrators should prioritize patching the kernel across all affected environments to eliminate the race condition. Ensure that standard patch management cycles are followed to apply these fixes promptly, especially on multi-user systems where local privilege escalation is a concern.