A race condition exists in the Linux kernel SMB client when two query interface operations are performed concurrently. The implementation allows both threads to attempt to update interface information at the same time without proper locking.

All installations of the Linux kernel are potentially affected, as the common platform enumeration refers to the generic Linux kernel and no specific version range is provided. Users should examine the kernel release notes around the commit references listed in the advisory to determine whether their current kernel includes the patch that adds locking to the query interface.

The CVSS score is 5.5, EPSS score not available, and the vulnerability is not listed in the CISA KEV catalog, so the objective severity is moderate. The likely attack vector is local or privileged access, inferred from the requirement that an attacker would need to trigger simultaneous SMB client operations to exercise the race. No publicly documented exploits exist; the threat remains theoretical until proof-of-concept code is released.