A race condition in the Linux kernel network driver can cause a permanent denial of service on the cellular data path, rendering affected hardware unable to transmit or receive network traffic.

This is a race condition (CWE-362) within the IPA (IP Accelerator) network driver that occurs during the runtime resume process. The vulnerability allows an unauthenticated attacker or a system state event to trigger a permanent stall of the modem TX queue, effectively disabling the network interface.

The primary impact of this vulnerability is a persistent denial of service affecting cellular data connectivity. Because this flaw causes the device to stop processing packets and prevents automatic recovery, it could lead to significant operational disruptions for devices relying on cellular backhaul, such as mobile handsets or remote IoT gateways. The CVSS score of 7.5 reflects the high impact on system availability, even though the vulnerability does not directly lead to data compromise or unauthorized code execution.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later to incorporate the fix for the IPA driver race condition.

Proactive Monitoring: Monitor system logs for repeated network interface resets or unexplained cellular data drops that persist without triggering watchdog timeouts.

Compensating Controls: There are no effective software-based compensating controls for this kernel-level race condition; updating the affected kernel is the only reliable method to prevent the stall.

Public Exploit Available: No

Organizations deploying Linux-based devices that utilize the IPA driver for cellular connectivity should prioritize patching their kernel to the specified versions. Given that this vulnerability leads to a permanent loss of network connectivity that cannot be recovered without a reboot, timely application of the patch is critical to maintaining service reliability and device uptime.