Impact
The vulnerability resides in the ring buffer implementation of the Linux kernel. A race condition allows a per‑CPU buffer swap to occur while a write operation is still in progress. This can corrupt the buffer state and trigger an RB_WARN_ON diagnostic. The resulting inconsistency may cause kernel instability or a denial of service, but no direct code‑execution path is described.
Affected Systems
All Linux kernel distributions that contain the pre‑patch ring_buffer_swap_cpu logic are affected. The CNA vendor entry for Linux:Linux indicates that any kernel version prior to the commit that added the current_context check is vulnerable. Updating to a kernel version that includes the patch or applying the referenced commits fixes the issue.
Risk and Exploitability
The CVSS score of 7.8 indicates moderate to high severity; the EPSS score of <1% suggests a low exploitation probability, and the vulnerability is not listed in the KEV catalog. Based on the description, an attacker would need to manipulate interrupt timing or possess local kernel privileges to trigger the race window. While there is no clear path to confidentiality or integrity compromise, the potential for kernel crashes means the risk to availability warrants timely remediation.
OpenCVE Enrichment
Debian DLA
Debian DSA