A race condition exists in the Linux kernel’s ring‑buffer subsystem where ring_buffer_subbuf_order_set() can clear cpu_buffer->free_page, leading to a potential conflict with ring_buffer_alloc_read_page() and ring_buffer_free_read_page(). If the lock on cpu_buffer is not held during resizing, an attacker could trigger an inconsistent page clear causing a or a denial of service.

The vulnerability affects the Linux kernel; no specific versions were disclosed, so all kernel releases prior to the patch that contain the unchecked ring‑buffer resizing logic are susceptible.

The CVSS score of 4.7 indicates low to moderate risk. The EPSS score of 0.002 indicates a very low probability of exploitation, and the vulnerability is not listed in CISA KEV, suggesting limited evidence of active exploitation. The attack vector is inferred‑ access. Because the flaw arises from a missing lock, it is suitable for exploitation only in scenarios where an attacker can influence ring buffer usage.