The reported issue was a race condition in nf_tables, where new hooks were inserted into the hook list during the commit phase using splice_list_rcu(). This implementation did not properly synchronize concurrent ruleset updates with RCU‑protected netlink dump traversals. As a result, the state of the hook list could become inconsistent while netlink operations were in progress, which might affect kernel stability or availability.

Linux kernels that contain the nf_tables component and the splice_list_rcu implementation before the fix commit (for example, all current stable releases and kernel 7.1:rc1). Any system running a kernel with this code path and without the patch commit that resolves the race condition is potentially affected.

The CVSS score of 7.1 signifies a high severity vulnerability. The EPSS score of less than 1% indicates a very low likelihood of exploitation. It is not listed in the CISA KEV catalog and no public exploit is known. Based on the description, it is inferred that an attacker would need the ability to create or modify nf_tables rule sets, which normally requires local privileged access. The likely attack vector is therefore local, privileged, and exploitation could lead to denial of service.