A use-after-free vulnerability in the Linux kernel USB gadget UVC driver could allow a local attacker with low privileges to achieve privilege escalation or system compromise.

The vulnerability arises from dangling pointers in the uvc_function_bind and uvc_function_unbind functions. When an error occurs, the driver fails to nullify pointers after freeing memory, leading to a use-after-free condition that can be triggered by a local authenticated user.

The flaw carries a CVSS score of 7.8, indicating a high-severity risk. A successful exploit allows a local attacker to execute arbitrary code or cause a system crash, resulting in potential data loss, unauthorized access to sensitive kernel-level memory, or significant service disruption.

Immediate Action: Update your Linux kernel to the corrected versions (6.12.109, 6.18.50, or 7.2.4) or apply the upstream patches provided via the kernel stable git repositories.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages related to the UVC gadget driver, which may indicate attempted exploitation.

Compensating Controls: Restrict access to USB gadget functionality and ensure that only trusted users have the capability to bind or interact with USB device drivers on sensitive systems.

Public Exploit Available: No (exploit_available: unknown)

Given the potential for local privilege escalation, this vulnerability should be prioritized for systems where users have local access or where untrusted USB devices are connected. Administrators must verify their current kernel build and apply the appropriate stable kernel patches to remediate this dangling pointer flaw effectively.