A vulnerability in the Linux kernel dmaengine idxd driver allows for potential local privilege escalation via improper lock management during setup failure.

The flaw occurs within the idxd_cdev_open function where a failure in the device setup process leads to an incorrect handling of the file-device reference while the wq-wq_lock is still held. An authenticated local attacker could leverage this improper cleanup to impact system stability or escalate privileges.

The vulnerability carries a CVSS score of 7.8, representing a high risk to system integrity and availability. Successful exploitation could allow a local user to gain unauthorized control over the system, potentially leading to total system compromise and data exposure.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, 7.1.8, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel-related errors or panics, particularly those associated with the idxd driver and dmaengine operations.

Compensating Controls: Restrict local access to the system and ensure that only authorized users have the capability to interact with the device drivers.

Public Exploit Available: No (unknown).

Given the potential for privilege escalation and the critical nature of the Linux kernel, organizations should prioritize patching affected systems. Apply the recommended kernel updates as soon as they are made available by your Linux distribution provider to mitigate this risk.