The vulnerability is a toctou race condition in Windows Subsystem for Linux that permits an authorized local attacker to elevate privileges. This flaw allows the attacker to replace or modify a resource between the check and use stages, enabling execution of privileged code within the WSL environment. The impact is local privilege escalation, potentially allowing the attacker to gain full control over the host operating system.

This issue affects Microsoft Windows Subsystem for Linux (WSL2) across all installed versions that have not received the Microsoft fix. The absence of explicit version data means any WSL2 deployment is susceptible until patched. The vulnerability is limited to machines where WSL2 is enabled and can be exploited by users with local access.

The CVSS score of 7 indicates a high severity local vulnerability. EPSS is not available, and the issue is not listed in CISA KEV, suggesting limited public exploitation data. The race condition requires an authorized user with local access to trigger, but once triggered it can give the attacker full privilege on the host system. Therefore the risk is significant for environments that allow local user interaction with WSL2.