The vulnerability originates from a missing lock around the ring buffer reset path in the ALSA OSS sequencer subsystem. When snd_seq_oss_readq_clear() clears the queue without holding q->lock, a concurrent call to snd_seq_oss_readq_free() or snd_seq_oss_readq_put_event() can race, leaving stale or dropped records and producing incorrect readiness notifications. The data race, advertised by KCSAN, can corrupt audio data handling and potentially crash or silently misbehave the audio subsystem, which may lead to a denial of service for applications relying on ALSA.

All Linux kernel releases that contain the unpatched ALSA OSS implementation are affected. The vulnerability is present in the kernel code for Linux as a whole; no specific distribution or kernel version number is listed, but any kernel built from the upstream source before the applied patch is vulnerable.

The CVSS score is not provided and the EPSS score is unavailable, so the quantitative risk is uncertain. The issue appears local; an attacker would need access to the ALSA OSS interface and could trigger it by generating concurrent read/write operations from the same process or two processes. Although the kernel protects many of its internal structures, a local user with the ability to issue ALSA ioctl or read operations could potentially exploit the race to corrupt state. The vulnerability is not registered in the CISA KEV catalog, suggesting no current widespread exploitation, yet the data race remains a severe concurrency fault that warrants timely remediation.