The vulnerability is a race condition between reads and writes to the 'memcg_path' and 'path' files in the DAMON sysfs interface. A write operation deallocates the buffer that holds the path while a separate read can still access the deallocated memory. This results in a use‑after‑free condition that can corrupt kernel memory if an attacker can control the memory layout. The flaw does not provide immediate executable code but yields significant exploitability in a local privileged context.

The flaw exists in the Linux kernel for all releases for which the patch has not yet been applied. No specific kernel versions are listed as affected; the vulnerability is identified generally across the Linux platform.

The CVSS score is not disclosed in the available data, and no EPSS value is provided, so the likelihood of exploitation remains uncertain. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack requires a local user with the ability to read and write the /sys/kernel/damon/memcg_path file, typically meaning root or a user with elevated rights. The race condition makes the issue exploitable when reads and writes are performed via separate open file descriptors, which is a common usage pattern. If successfully exploited, an attacker could corrupt kernel memory and potentially gain higher privileges or crash the system.