The vulnerability exists in the Linux kernel’s network scheduler, within the cls_route classifier. A race condition arises between packet classification (reader) and filter deletion (writer). If a filter pointer is cleared and freed while still referenced in the route4 fastmap cache, subsequent packet processing may read the freed memory, causing a use‑after‑free in kernel space. This memory corruption could allow arbitrary code execution in kernel context and potentially enable privilege escalation.

All Linux kernel builds that include the cls_route fastmap implementation prior to the recent commit are affected. The affected vendor is Linux:Linux, covering all distributions that ship this kernel code.

The CVSS score of 7.8 indicates high severity. EPSS score of 0.00165 (less than 1%) and the CVE is not listed in CISA's KEV catalog, so no publicly known exploits are reported. Based on the description, it is inferred that the race condition can be triggered by concurrent packet classification and filter manipulation; the exact attack vector is not explicitly identified in the advisory. The low EPSS score indicates a very low probability of exploitation, although the available information suggests that exploitation is possible under the right conditions.