The vulnerability is a bug in the Linux kernel's DWC3 USB gadget driver that fails to reset the GEVNTCOUNT register when an invalid event count exceeds the event buffer length, leaving the IRQ line asserted and creating a rapid IRQ storm that accumulates nearly 100,000 unhandled interrupts and triggers a kernel BUG in spurious.c, leading to an immediate kernel panic and service interruption. Based on the description, it is inferred that a privileged user or malicious actor could exploit the vulnerability by writing an out-of-range value to the GEVNTCOUNT register, a low-level hardware register normally only writable by kernel code. The interrupt storm is a form of resource exhaustion that exploits the kernel’s level-triggered interrupt handling. Although the resulting denial of service is severe, there is no known remote code execution or data exposure.

The issue exists in the Linux kernel. No specific kernel release or version number is listed in the data, so any build that includes the affected code path could be vulnerable. Both vendor identifiers list Linux: Linux, indicating this is a general kernel issue rather than a vendor-specific patch.

The EPSS score is less than 1%. The CVSS score is 5.1. However, the bug can be triggered by writing an out-of-range value to GEVNTCOUNT, a register that requires privileged access to modify, and the exploit would bind the system to a denial-of-service state via an IRQ storm and kernel panic. Based on the description, it is inferred that exploitation requires direct register manipulation and is limited to privileged users or a compromised device driver, but within that context the impact is fatal and the potential for exploitation is moderate to high if an attacker can gain the necessary write privileges.