A high-severity race condition in the Linux kernel amba-pl011 serial driver could allow a local authenticated user to compromise system integrity and availability.

The vulnerability exists in the amba-pl011 serial driver, where dmaengine_terminate_all does not correctly synchronize with running callbacks, leading to potential use-after-free scenarios. An attacker with local access can exploit this race condition to read or write to buffers after they have been freed, or bypass buffer locking mechanisms.

Successful exploitation of this vulnerability by a local attacker can result in unauthorized memory access, system instability, or privilege escalation. Given the CVSS score of 7.8, the potential for local root compromise or kernel panics poses a significant threat to the confidentiality, integrity, and availability of affected systems.

Immediate Action: Update the Linux kernel to version 5.10.267, 5.15.218, 6.1.185, 6.6.154, or newer, depending on the specific branch in use.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected system reboots, which may indicate attempted exploitation of kernel-level race conditions.

Compensating Controls: Restrict local access to the system to only authorized personnel and ensure that untrusted users cannot execute arbitrary code or load malicious modules.

Public Exploit Available: No

Organizations should prioritize patching kernels on all systems utilizing the amba-pl011 serial driver to prevent potential local privilege escalation. System administrators must verify their current kernel versions against the provided fixed releases and coordinate maintenance windows to apply the necessary security updates.