A race condition in the Linux kernel USB core could allow a local authenticated attacker to achieve arbitrary code execution or cause a system crash.

This vulnerability is a race condition within the usb_core sysfs implementation, specifically involving the bos_descriptors_read function. An attacker with local, low-privileged access can trigger a use-after-free condition by racing the descriptor read against a device reset process that frees the underlying memory.

The exploitation of this vulnerability permits a local user to escalate privileges or cause a kernel panic, leading to unauthorized system access or unexpected downtime. With a CVSS score of 7.8, the vulnerability is classified as High severity, reflecting the potential for full system compromise if an attacker gains local access to the affected environment.

Immediate Action: Update the Linux kernel to version 6.12.101, 6.18.42, 7.1.6, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults related to usb_core or sysfs access, which may indicate attempted exploitation.

Compensating Controls: Restrict local shell access to untrusted users and enforce strict physical security policies to prevent unauthorized USB device interaction, which is required to trigger this flaw.

Public Exploit Available: No

Given the severity of potential kernel-level exploitation, organizations should prioritize patching affected Linux systems as part of their next scheduled maintenance cycle. Applying the provided kernel updates is the only definitive way to resolve the underlying race condition and prevent potential local privilege escalation.