The flaw is an unprotected, use‑after‑free in the Linux kernel’s pktgen driver. While a pktgen thread is renaming a device, the related proc entry can be removed concurrently, leaving a stale pointer that is later dereferenced during removal. This race leads to corruption of kernel memory, which may manifest as a kernel crash or, in the worst case, arbitrary code execution with kernel privileges. The description does not confirm privilege escalation; the effect is kernel memory corruption that can potentially be exploited.

The vulnerability resides in the Linux kernel’s pktgen subsystem. No specific kernel release is listed, so any kernel code containing the buggy pktgen paths before the published fix could be affected. The CNA vendor designation lists the product simply as Linux kernel.

The CVSS score of 7.8 indicates high severity, yet the EPSS score is less than 1 % and the issue is not in CISA’s KEV list. The known exploit requires a local, race‑condition scenario involving two kernel threads and careful timing, which raises the attack complexity but still allows a determined local attacker to cause memory corruption. Because kernel memory corruption can lead to privilege escalation or system crash, the risk remains high for unpatched systems.