The kernel flaw is a race condition in the private futex subsystem that arises during an exec transition. While the exec process is swapping in a new mm structure, the futex check for ownership still references the old mm, allowing a malicious process to override or corrupt the futex state. This can lead to a use‑after‑free or arbitrary code execution in kernel mode, effectively permitting privilege escalation. The weakness is a classic race condition (CWE‑362) with possible use‑after‑free behavior (CWE‑416).

All Linux kernel releases that run the vulnerable code path are affected. The CVE does not list specific version ranges, so any kernel that has not yet incorporated the patch is at risk. Distributions that ship a patched kernel or an up‑to‑date kernel package, or containers that use a recent base image, are not impacted once they have applied the fix.

The exploit requires a local attacker who can schedule the race during an exec transition. No EPSS score is currently available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting it is not widely exploited yet. However, the severity of a kernel use‑after‑free or arbitrary code execution remains high, and the lack of a public exploitation metric means defensive action should be treated with caution. The CVSS score is not provided, but the fundamental nature of the bug indicates a high inherent risk for affected systems.