A race condition exists in the Linux kernel trace buffer implementation where the subbuffer size field can be read while a resize operation modifies it, causing inconsistent buffer state. This inconsistency can corrupt trace event data and potentially lead to kernel instability, resulting in a denial of service. The weakness is a classic race condition, classified as CWE-366. The reported CVSS score of 7.8 reflects a high severity impact confined to systems running affected kernel versions.

All Linux kernel releases that include the generic trace buffer implementation with the subbuf_size field are affected, which includes most recent kernel versions used by mainstream distributions. Any system built on such kernels that enables trace buffer logging is potentially vulnerable.

The EPSS score of less than 1% indicates a very low probability of active exploitation observed to date. The vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation. Although the flaw is local and relies on manipulating internal kernel state, an attacker with local access could trigger the race, leading to a denial of service. The overall risk is high due to the severity but the likelihood of exploitation remains low at this time.