The vulnerability is a race condition that results in a use‑after‑free in the fastrpc subsystem of the Linux kernel. During fastrpc_map_lookup the lock is released before a pointer to the map is returned. If a concurrent MEM_UNMAP frees the map between this release and the subsequent kref_get_unless_zero call in fastrpc_map_create, the kernel touches invalid memory, which can cause a crash or, if the attacker can control the freed memory contents, arbitrary code execution.

All Linux kernel builds that have not applied the fastrpc_map_create patch are susceptible. The affected vendor is Linux, and the product is the Linux kernel. No specific version range is supplied, so any kernel older or equal to the commit before the patch is potentially vulnerable.

Because the description does not provide a CVSS score or EPSS metric, the exact risk profile is uncertain, but a use‑after‑free in kernel code is typically high severity. The vulnerability is local to the system and requires the attacker to trigger the race in a way that leads to a kernel memory fault. It is not listed in CISA's KEV catalog, and no EPSS data is available, so the current exploitation probability cannot be quantified.