The linux kernel’s ims-pcu driver contains a race condition in the reset_device sysfs callback: the callback invokes ims_pcu_execute_command() without holding pcu->cmd_mutex, allowing concurrent write attempts to corrupt the shared command buffer. This flaw falls under CWE-414 – modification of control flow data due to improper synchronization. An attacker who can trigger the sysfs interface concurrently, such as a privileged local user, could corrupt the command buffer, potentially leading to device malfunction or a local denial‑of‑service. The damage is confined to the affected hardware but may impact any process relying on that device.

All Linux kernel releases that include the unpatched ims-pcu driver and expose the reset_device sysfs node are vulnerable. Kernels containing the fix commit are safe. The advisory does not list a limited version range, so any kernel prior to the patch should be treated as affected.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of < 1% shows the flaw is unlikely to be exploited publicly. The vulnerability requires write access to a sysfs node, meaning it is a local or privileged threat. Although no public exploit has been reported and the flaw is not in CISA’s KEV catalog, successful exploitation could corrupt shared memory and destabilize the device driver, leading to a denial‑of‑service for users of the affected hardware.