A race condition exists in the Linux kernel’s netfilter ipset subsystem where lockless RCU readers use the relaxed atomic function test_bit() instead of the memory‑ordered test_bit_acquire(). Because test_bit() provides no memory‑barrier guarantees, concurrent add, delete, or garbage‑collection operations on the same hash structures can interleave and leave the data structure in an inconsistent or stale state. It is inferred from the description that this could lead to kernel memory corruption and crash, resulting in unpredictable system behavior. The CVE description does not explicitly state the impact, but the nature of the bug strongly suggests instability at the kernel level.

All Linux kernel implementations that ship the netfilter ipset framework and have not incorporated the commit e4b4984 or later are affected. The advisory does not list specific kernel versions; the vulnerability applies to any kernel that lacks the patch, regardless of distribution or custom build. Hardware or operating system configuration do not narrow the scope further.

The CVSS score of 9.8 denotes severe impact, while the EPSS score of <1% reflects a very low probability of exploitation under current conditions. The vulnerability is not present in the CISA KEV catalog. Based on the description, the attack vector is not explicitly documented. Exploitation would likely require manipulating ipsets concurrently, possibly via local or remote traffic that triggers concurrent add/delete operations, but the exact methods are not detailed in the CVE data. The potential for catastrophic kernel instability exists if the race is successfully triggered.