Based on the description, the vulnerability arises from a race condition in tcp_v6_syn_recv_sock() where the child socket becomes visible in the TCP ehash table before appropriate initialization. The timing issue may allow another CPU to access the socket with an incomplete IPv6 pointer, potentially causing memory corruption or a kernel panic. This flaw is characterized by concurrency‑related weakness and an improper initialization condition. The primary impact is loss of confidentiality, integrity, and availability due to possible kernel faults.

The affected product is the Linux kernel in all releases that contain the unpatched implementation of tcp_v6_syn_recv_sock(). No specific version range is listed, so any active kernel signed by Linux:Linux is potentially vulnerable.

The likely attack vector involves network‑based traffic that triggers a SYN packet to the affected socket, inducing the race condition. The EPSS score is < 1%, and the CVSS score is 9.8, making the likelihood of exploitation uncertain. Although exploitability is uncertain, because the flaw can lead to kernel corruption, the risk of exploitation is considered high in terms of impact.