A race condition vulnerability in the Linux kernel ARC EMAC driver could allow a local attacker with low privileges to achieve high-impact system compromise.

This flaw exists in the ARC EMAC ethernet driver, where improper interrupt handling during device probing and teardown allows stale hardware interrupt statuses to trigger race conditions. An attacker with local access can exploit this window to cause unexpected kernel behavior, requiring low privileges to initiate.

The vulnerability carries a CVSS score of 7.0, indicating high severity due to the potential for confidentiality, integrity, and availability loss. While the attack requires local access, successful exploitation could lead to system crashes, denial of service, or escalation of privileges, potentially compromising sensitive data processed within the kernel environment.

Immediate Action: Update the Linux kernel to the patched versions (5.10.253, 5.15.203, 6.1.167, 6.6.130 or later) provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for unexpected kernel panics or driver-related error messages during hardware initialization and teardown sequences.

Compensating Controls: Restrict local shell access to untrusted users and enforce strict kernel module loading policies to limit the attack surface for local privilege escalation vectors.

Public Exploit Available: Unknown

Given the high CVSS severity and the potential for kernel-level impact, organizations should prioritize scheduling maintenance windows to apply the necessary kernel updates. Although local access is required, the risk to system stability and integrity is significant, necessitating timely patching across all affected Linux infrastructure.