The netfs subsystem in the Linux kernel had a race condition caused by missing locking in netfs_retry_read_subrequests() and netfs_retry_write_stream(). When multiple threads concurrently add subrequests during a retry, the subrequest list can become corrupted, leading to memory corruption or a use‑after‑free within the kernel networking stack. This flaw may result in local system crashes or, if exploited with sufficient privileges, could provide a foothold for higher‑privilege compromise. The CVE does not explicitly claim remote code execution, but the type of error qualifies as a critical resource‑management vulnerability.

All Linux kernel releases that contain the unpatched netfs retry logic are vulnerable. The advisory does not specify a kernel version range, so any distribution shipping a pre‑fix kernel (including common mainstream distributions) is considered at risk until an updated kernel is installed.

With a CVSS score of 9.8, this issue is rated critical. The EPSS score is below 1%, indicating a low but non‑zero likelihood that exploitation is occurring today. The vulnerability is not yet listed in CISA’s KEV catalog. The race condition requires concurrent activity on the netfs retry path, which suggests that straightforward remote exploitation is unlikely; however, a local attacker or one who can generate sufficient network traffic to trigger the retry sequence could induce the race and cause a crash or memory corruption. No public exploitation evidence is available, so the attack surface remains theoretical.