Based on the description, it is inferred that a race condition exists in the initialization of the eb_tables netfilter bridge module. During module startup the socket options are registered globally before all necessary components are fully initialized, exposing configuration data to privileged modules prematurely. This race could allow a local attacker to manipulate or read socket options before the module is fully ready, potentially compromising network filtering and elevating privileges. The flaw stems from improper synchronization during module startup and is a classic race‑condition weakness.

All Linux kernel releases that include the ebtables bridge module without the patch commit referenced in the CVE. The vulnerability applies to any Linux system with ebtables enabled, regardless of distribution.

The CVSS score of 7.8 classifies it as high severity. The EPSS score is below 1%, indicating a low probability of exploitation in the wild, and it is not listed in CISA KEV, meaning no known active exploitation. Based on the description, it is inferred that the attack vector would be local, requiring local system access or the ability to load kernel modules. If the race is triggered, an attacker could leak sensitive socket option configurations or interfere with packet filtering, which could be leveraged for privilege escalation or denial of service.