A race condition (CWE-362) in the IPv6 routing stack occurs when rt6_uncached_list_del fails to acquire the necessary spinlock, allowing concurrent modification of a list that may have already been freed. This flaw enables a use‑after‑free (CWE-416) that triggers a KASAN report and often results in a kernel crash, leading to panic or soft lockup and effectively denying service. The vulnerability does not grant remote code execution, but the resulting denial of service can be leveraged to destabilize node or cluster availability.

All publicly released Linux kernel versions from 3.6 onward, including every Linux 6.19 release candidate up through rc8, are affected. Because the code resides in the generic routing subsystem, any distribution shipping one of these kernel versions—whether on bare metal, virtual machines, or containers—can be impacted until the race‑condition fix is applied.

The CVSS score of 7.8 indicates high severity, while the EPSS score of less than 1% suggests a very low probability of widespread exploitation at present. The flaw was demonstrated by a fuzzing bot that creates race conditions by rapidly bringing network interfaces up and down; based on the description, it is inferred that an attacker could trigger the crash by manipulating interface states or sending crafted packets that invoke the race condition. Though no public exploit exists and the issue is not listed in CISA KEV, an attacker with sufficient network access could cause repeated crashes, leading to a denial‑of‑service attack.