A race condition exists in the Linux kernel SMB client when two query interface operations are performed concurrently. The implementation allowed both operations to update interface information at the same time without acquiring a lock, resulting in inconsistent or corrupted kernel data. This flaw is classified as CWE‑821 and can lead to kernel instability, crashes, and system disruptions.

The vulnerability affects the Linux kernel, specifically version 5.19 and its release candidate builds rc4 through rc8. All installations of a Linux kernel lacking the commit that adds selective locking to the query_interface() function are potentially impacted. Users should verify the presence of the relevant patch or ensure they are running a kernel that includes the change.

The CVSS score is 8.8 and the EPSS score is less than 1 %, indicating a high severity but a low likelihood of exploitation. The flaw is not listed in the CISA KEV catalog. The attack vector is inferred to be local or to require an attacker able to generate concurrent SMB client queries, such as by manipulating SMB traffic from a trusted or compromised host. No public exploits have been reported, and the threat remains theoretical until a proof‑of‑concept is released.