The Linux kernel’s parallel‑port subsystem registers port devices before they are fully initialized. When client drivers such as lp attach to such ports during setup or teardown, a race condition ensues that can crash the kernel, causing a loss of service. This weakness is a race condition (CWE‑367) involving concurrent modification of shared data (CWE‑362).

Any Linux system that uses the built‑in parport subsystem and loads lp or parport_pc modules remains vulnerable. As no specific kernel version range is provided, all kernels with a functional parport implementation before the patch are potentially affected, including most recent releases until the fix is shipped by the distribution.

The CVSS score of 7.8 indicates high severity, but the EPSS score of less than 1% suggests exploitation is unlikely in the wild. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires privileges sufficient to load kernel modules, typically local users or compromised processes. The risk is moderate with a low probability of active exploitation. Based on the description, it is inferred that the attack vector involves loading incompatible kernel modules during system boot or runtime to trigger the race condition.