The vulnerability is a race condition in the Linux kernel’s af_unix subsystem where the flag gc_in_progress is mistakenly left false while unix_gc() runs. This allows a concurrent MSG_PEEK request to observe data that would normally be protected during garbage‑collection cycles, potentially leaking information that should remain hidden. The weakness is identified as CWE‑366, a race condition involving improper flag handling. Based on the description, it is inferred that the attack requires a local attacker who can create or access a Unix domain socket and time a MSG_PEEK operation to coincide with an unguarded GC cycle.

All Linux kernel releases that do not contain the commit which sets gc_in_progress to true at the start of unix_gc() are vulnerable. This includes every distribution or custom kernel that ships an unpatched version of the af_unix code across all supported architectures.

The CVSS score of 7.1 indicates a high severity, while the EPSS score of <1% shows that exploitation likelihood is currently low. The vulnerability is not listed in CISA KEV, further reducing its immediate risk profile. The likely attack vector is local, requiring the attacker to have the ability to manipulate or observe a Unix domain precise timing and the flag’s mis‑management during garbage collection. Though conditions are specific, the scope of data exposure justifies prompt remediation.