An invoke of the fastrpc subsystem can be interrupted by a signal, causing the kernel to move all buffers from a file's mmap list onto an "interrupted" list. This movement uses list traversal functions without holding the lock that normally serialises access to the mmap list. The missing lock introduces a race condition that can corrupt kernel memory or allow an attacker to manipulate the list of memory mappings.

All Linux kernel releases that include the fastrpc subsystem before the commit that introduces the missing lock fix are potentially affected. Specific affected version ranges are not provided in the data, so users should verify whether their kernel includes the fix by checking the kernel source history. Any distribution that ships the vulnerable kernel without the patch is likewise vulnerable.

The CVSS score of 7.8 indicates high severity. The EPSS score is below 1% and the vulnerability is not listed in the CISA KEV catalog, indicating no known public exploits at the time. Based on the description, it is inferred that a local attacker with sufficient privileges could trigger the race condition by manipulating fastrpc operations, potentially leading to privilege escalation or arbitrary code execution. Remote exploitation is not explicitly described in the data, so its feasibility remains uncertain.