A race condition within the Linux kernel tegra241-cmdqv driver could allow an authenticated local attacker to achieve privilege escalation or system instability.

The vulnerability is a concurrency issue within the tegra241-cmdqv driver where the error interrupt service routine is not properly synchronized against VINTF initialization and teardown. An attacker with local access (requiring low privileges) can exploit this race condition to trigger a NULL pointer dereference or a use-after-free condition.

The vulnerability carries a CVSS score of 7.8, indicating high severity due to the potential for full system compromise. While local access is required, successful exploitation allows an attacker to gain elevated privileges or crash the host system, resulting in significant service disruption and potential unauthorized access to sensitive kernel memory.

Immediate Action: Apply the vendor-provided kernel patches by updating to Linux Kernel version 6.18.52 or 7.2.6, or the latest available stable release from your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages specifically related to the tegra241-cmdqv driver, which may indicate attempted exploitation.

Compensating Controls: Restrict local user access to the system and ensure that only authorized users have the ability to interact with hardware-specific interfaces that may trigger the vulnerable driver code.

Public Exploit Available: No

This vulnerability represents a significant risk to systems utilizing the affected Tegra hardware, as it allows for potential kernel-level exploitation. Organizations should prioritize patching their kernel environments to the recommended versions to eliminate the race condition. Until patches can be deployed, administrators should restrict local access to the affected hardware to minimize the attack surface.