A critical vulnerability in the Linux kernel DIBS driver may allow unauthenticated remote attackers to achieve full system compromise through improper lock initialization.

The vulnerability exists due to the improper initialization of a spinlock within the DIBS driver, which is accessed by the interrupt handler before it is ready. An unauthenticated attacker can trigger this condition by generating specific GID event interrupts, causing the kernel to attempt an operation on an uninitialized lock structure.

The CVSS score of 9.8 (Critical) reflects the potential for complete system compromise, including unauthorized data access and denial of service. Exploitation of this flaw could allow an attacker to execute arbitrary code with kernel-level privileges, leading to total loss of system confidentiality, integrity, and availability.

Immediate Action: Update the Linux kernel to version 6.18.45, 7.1.9, or later versions where the lock initialization sequence has been corrected.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unexpected interrupt-related crashes that may indicate an exploitation attempt.

Compensating Controls: Ensure that systems are isolated behind robust network firewalls to limit exposure to untrusted traffic, as the attack vector requires network access to trigger the GID event interrupts.

Public Exploit Available: Unknown

This vulnerability represents a significant risk to the stability and security of affected Linux environments. System administrators should prioritize testing and deploying the provided kernel patches across all exposed infrastructure. Given the critical nature of the flaw, failure to patch may leave systems vulnerable to remote exploitation and full administrative takeover.