The vulnerability arises from a race condition in the Linux kernel hwrng core where the hwrng_fill pointer is cleared outside of the rng_mutex lock. This allows a concurrent hwrng_unregister() call to invoke kthread_stop() on a task that has already been stopped or freed, creating a use‑after‑free. It is inferred that this memory corruption could destabilize or crash the kernel. The flaw is a classic kernel memory corruption scenario as described in the patch notes.

All Linux kernel implementations that have not yet incorporated the fix described in the patch set. The affected component is the hwrng core module, which is responsible for providing hardware entropy to the kernel random number generator.

The CVSS score is 5.5. The EPSS score is < 1%, and the vulnerability is not listed in CISA’s KEV catalog. As is typical with kernel use‑after‑free flaws, exploitation would require a local attacker to trigger the race condition. The likely attack vector is local, involving concurrent registration and unregistration of hwrng devices, inferred from the description. No publicly confirmed exploits were cited in the provided references.