In Linux kernels that implement the IP Virtual Server (IPVS) subsystem, a race exists between the network device notifier ip_vs_dst_event() and the code that caches destination routes when a device is shut down. The race can cause the kernel to keep a stale reference to a device that has already been deactivated, potentially leading to instability or crashes when the reference is later accessed. The weakness is a resource‑leak race condition, reflected in CWE‑367.

All Linux kernel releases that include the IPVS facility are affected. No specific version range is listed, but the fix was introduced in mainline after the referenced commits and is included in subsequent kernel releases.

The CVSS score of 5.5 indicates a moderate severity vulnerability. The EPSS score of less than 1% and absence from CISA's KEV catalog suggest that no public exploitation has been documented. The CVE description does not specify an attacker model or attack vector, but the issue arises when a network device being taken down is cached by IPVS, potentially resulting in a resource leak. While the exact impact on stability or availability is not detailed, a leaked reference could lead to kernel instability or crashes if accessed. Because the vulnerability manifests during normal kernel operations for systems using IPVS during device shutdown, no specific remote or elevated privileges are mentioned beyond host access, and the risk is primarily the accidental retention of a device reference until it is removed.