A double unlock occurs in the RXRPC receive function when processing out‑of‑band messages. The redundant release of a lock can corrupt the kernel’s synchronization state and trigger a kernel panic, resulting in a denial of service. This vulnerability is an improper unlocking scenario (CWE‑832).

All Linux kernel builds that compile the rxrpc subsystem before the commit that adds the double‑unlock fix are vulnerable. Because the CVE does not specify a limited version range, any kernel version lacking the patch should be considered at risk, including those shipped by mainstream Linux distributions.

The vulnerability receives a CVSS score of 9.8, indicating a severe impact, but its EPSS score is below 1%, suggesting that exploitation is currently unlikely. It is not listed in the CISA KEV catalog, and no publicly known exploit has been reported. The most likely attack vector is remotely sending crafted RXRPC messages to trigger the double unlock, which can cause a kernel panic. Due to the low exploitation probability, the high severity still warrants prompt remediation.