The Linux kernel’s parallel‑port subsystem registers port devices before they are fully initialised. When client drivers such as lp attach to such ports while they are still being set up or torn down, a race condition can occur that crashes the kernel, resulting in a loss of service. This weakness is a race condition (CWE‑367).

Any Linux system that uses the built‑in parport subsystem and loads lp or parport_pc modules remains vulnerable. As no specific kernel version range is provided, all kernels with a functional parport implementation before the patch are potentially affected, including most recent releases until the fix is shipped by the distribution.

The CVSS score of 7.8 indicates high severity, but the EPSS score of less than 1% suggests exploitation is unlikely in the wild. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires privileges sufficient to load kernel modules, typically local users or compromised processes. The risk is moderate with a low probability of active exploitation. Based on the description, it is inferred that the attack vector involves loading incompatible kernel modules during system boot or runtime to trigger the race condition.