A race condition exists in the Linux kernel MPU3050 gyro driver where iio_device_register() is called before the probe function completes; this ordering flaw could allow a local attacker to trigger concurrent probe operations and possibly corrupt kernel memory. Based on the description, the timing violation could lead to kernel state manipulation, which may in turn provide an avenue for privilege escalation.

Linux kernel builds that include the MPU3050 gyro driver without the recent patch are vulnerable. Since the CNA product list identifies only Linux kernels under the cpe:2.3:o:linux:linux_kernel:* class, the issue applies across all kernel releases containing the unpatched driver, regardless of version specifics.

The CVSS score is 7.8 and the EPSS score is less than 1%, indicating limited but non‑zero exploitation probability. The vulnerability is not present in the CISA KEV catalog. Based on the description, it is inferred that exploitation would require local access to trigger the probe routine, making the attack vector local. While no definitive exploitation has been reported, the presence of a race condition that could lead to privilege escalation renders the risk significant for affected systems.