A race condition in the Linux kernel i3c master driver allows for an uninitialized lock access, which may lead to system compromise or denial of service.

The vulnerability exists in the adi_i3c_master_probe function, where interrupts are enabled before the required transfer queue locks are initialized. An attacker can trigger this race condition during the driver initialization process, resulting in an attempt to acquire an uninitialized spinlock.

Successful exploitation of this flaw allows an attacker to cause a kernel-level failure, resulting in system crashes or potential arbitrary code execution within the kernel context. Given the CVSS score of 8.4, this vulnerability represents a high-severity risk to system integrity and availability, particularly for environments relying on I3C master controllers.

Immediate Action: Update the Linux kernel to version 6.18.50, 7.2.4, or later versions where the initialization order has been corrected to ensure locks are prepared prior to interrupt enablement.

Proactive Monitoring: Monitor system logs for kernel panic events or Lockdep warnings that indicate improper lock acquisition or driver initialization failures during boot sequences.

Compensating Controls: Restrict access to the system console and prevent untrusted users from triggering hardware driver re-initialization or module loading processes, which serve as the primary attack vectors for this race condition.

Public Exploit Available: Unknown

The severity of this vulnerability, combined with its potential for kernel-level impact, necessitates prompt patching. Administrators should prioritize updating systems that utilize the affected i3c master driver, as this fix is critical to maintaining kernel stability and preventing local escalation of privilege.