The flaw is a race condition (CWE-366) between kthread_complete_and_exit and kthread_stop in the RSI wifi driver. If the thread exits first with kthread_complete_and_exit and then kthread_stop is called, the kernel may free the kthread structure while the stop call still accesses it, leading to a use‑after‑free that could corrupt kernel memory or cause a crash.

The vulnerability resides in the Linux kernel’s RSI wifi driver and affects Linux kernel releases, including version 7.1 RC1 and RC2 as well as all other kernel versions listed in the CPE data. Any kernel build that contains this driver prior to the commit that removes kthread_stop usage may be susceptible.

The EPSS score of < 1% suggests a very low exploitation frequency. The CVSS score of 4.7 indicates a low‑to‑moderate severity. The vulnerability implies kernel memory corruption, which, if successfully triggered, could allow an attacker with local or privileged access to gain kernel privileges or cause a denial of service. Based on the description, it is inferred that the attack would require a local attacker who can influence the driver’s lifecycle, such as by loading or unloading the module. The flaw is not listed in CISA’s KEV catalog, indicating that it has not been observed in the wild as of now.