A race condition in the ksmbd SMB server component of the Linux kernel allows a use‑after‑free when the function pointer opinfo is dereferenced after releasing the RCU lock. This flaw can cause the kernel to read freed memory, potentially leading to a crash (kernel panic) or other instability. While it does not provide a known path to arbitrary code execution or privilege escalation, it can be leveraged to disrupt service availability.

All Linux kernel releases that include the default ksmbd module without the recent patch are affected. The vulnerability is present in the ksmbd implementation part of the kernel and applies to any distribution that ships this component in its standard kernel image. No specific version range was listed in the advisory; therefore any kernel with the unpatched ksmbd code is potentially vulnerable.

The CVSS score of 9.8 indicates very high severity, while the EPSS score of less than 1% suggests a low probability of exploitation in the wild. Based on the description, it is inferred that the race condition would be triggered by SMB traffic or local interaction with the ksmbd service. Exploitation would likely result in a kernel crash that causes a denial of service, but no documented exploit provides remote code execution or privilege escalation.