A race condition within the Linux kernel Xilinx DMA engine driver poses a high risk of local privilege escalation or system instability.

This vulnerability is a race condition in the AXIDMA and MCDMA interrupt handlers that incorrectly marks channels as idle while descriptors are still being processed. An authenticated local attacker can leverage this flaw to trigger spurious transfers, which may lead to descriptor corruption or memory integrity issues.

The vulnerability carries a CVSS score of 7.8, reflecting a significant risk to system integrity and availability. Successful exploitation allows a local user to corrupt kernel memory or crash the system, potentially leading to unauthorized data access or a complete denial of service for critical infrastructure relying on Xilinx DMA hardware.

Immediate Action: Update the Linux kernel to version 5.10.270, 5.15.221, 6.1.188, or 6.6.157, depending on your current stable branch.

Proactive Monitoring: Monitor system logs for kernel panics, DMA-related error messages, or unexpected driver restarts that may indicate attempted exploitation.

Compensating Controls: Restrict access to systems utilizing Xilinx DMA hardware to trusted users only, as the attack vector requires local access to the system.

Public Exploit Available: Unknown

Given the potential for kernel-level memory corruption, administrators should prioritize patching affected Linux distributions as part of their next maintenance cycle. Although the attack requires local access, the high severity and potential for system instability necessitate timely remediation to protect the integrity of the computing environment.