The vulnerability pertains to the Linux kernel's eventfs subsystem. During a remount operation, eventfs walks through nodes while only holding an rcu_read_lock, which is insufficient for modifications performed elsewhere. This flaw introduces a race condition where list traversal can collide with list deletions, freeing of nodes, and attribute writes, potentially dereferencing poisoned list entries or using freed memory. The result is an unstable kernel that may crash or exhibit memory corruption.

All installations of the Linux kernel that have not applied the commit that corrects eventfs_remount_lock behavior are affected. No specific versions are listed, so any current kernel not patched by the referenced commit is vulnerable. Sellers or users should verify their kernel versions against the latest stable releases that incorporate commit 340f0c7067a9.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of < 1% suggests a very low likelihood of exploitation in the wild. The vulnerability is not listed in CISA KEV. Exploitation still requires local access to perform remount operations or write to kprobe_events. An attacker who can trigger the race could cause an out‑of-bounds read or use‑after‑free, which may lead to a kernel crash. Because the conditions are simple and the attack vector is local, the risk remains significant for systems that expose /sys/kernel/tracing to untrusted or low‑privileged processes.