In Linux kernel, a race condition exists between the functions vduse_dev_msg_sync and vduse_dev_read_iter. When the two functions operate concurrently, a second list_del() is performed on the same message structure, which can crash the kernel. The flaw is a concurrency bug leading to a double removal of a list element and can result in a kernel crash, thereby causing a denial of service on the affected system.

The vulnerability affects the Linux kernel itself. No specific kernel version is listed, so any release before the patch that includes the commit associated with the resolution may be impacted.

The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, so the exploitation probability is unknown. The CVSS score is not provided, but the impact of a kernel crash is high. The likely attack vector is exploitation of the vduse interface, though the precise vectors are not explicitly detailed in the available data. Given the lack of exploitation evidence, the risk is uncertain but the potential for a catastrophic denial of service remains.