A memory management vulnerability in the Linux kernel HID sensor subsystem poses a significant risk of system instability or potential code execution.

This is a resource cleanup vulnerability in the hid_sensor_custom_add_attributes function. If sysfs_create_group fails, the system does not properly remove previously created groups, which may allow an unauthenticated attacker on the local network to trigger memory-related errors.

The vulnerability carries a CVSS score of 8.8, indicating a high severity risk. Successful exploitation could lead to full system compromise or denial of service, impacting the availability and integrity of mission-critical systems running affected kernel versions.

Immediate Action: Update the Linux kernel to versions 6.12.109, 6.18.50, 7.2.4, or later versions as provided by the distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected crashes associated with HID sensor driver activity.

Compensating Controls: Ensure that kernel hardening features, such as Address Space Layout Randomization (ASLR) and kernel memory protection, are enabled to mitigate the impact of potential memory corruption.

Public Exploit Available: No

Given the high CVSS score, it is imperative that administrators prioritize patching the Linux kernel to the identified secure versions. Failure to remediate this flaw leaves systems susceptible to local network-based attacks that could destabilize the host or provide a vector for further exploitation.