A reference counting flaw in the Linux kernel omap2430 USB driver allows for potential memory corruption or system instability.

The vulnerability is a reference counting error within the omap2430_probe function. The function incorrectly invokes of_node_put on a borrowed device node pointer, which causes an unbalanced reference count for the platform device.

While the CVSS score of 8.4 suggests a high severity, the impact is primarily localized to system stability and potential local privilege escalation. Successful exploitation could lead to kernel panics, denial of service, or unauthorized memory access, potentially compromising the integrity of data processed by the host system.

Immediate Action: Update the Linux kernel to the patched versions provided by your distribution, specifically 6.1.184, 6.6.151, 6.12.101, or 6.18.42.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected hardware initialization errors related to the MUSB driver.

Compensating Controls: Ensure that systems using affected OMAP2430 hardware are isolated from untrusted users, as the attack vector requires local access to the system.

Public Exploit Available: No

Organizations utilizing Linux kernels within the affected version ranges should prioritize applying the kernel updates provided by their respective distribution maintainers. Given the nature of kernel vulnerabilities, testing patches in a non-production environment before deployment is recommended to ensure stability, but the risk of system instability from the vulnerability itself warrants an expedited patching cycle.