The vulnerability causes a race condition between ETM perf callbacks and the per‑CPU csdev_src pointer, which can lead to incorrect retrieval of path and source data. This race can result in kernel memory corruption or improper context handling, potentially compromising system integrity.

Vendors: Linux kernel. Affected systems include all Linux kernel implementations that incorporate the coresight and perf modules prior to the fix. No specific version list is provided; any kernel build with this code path is vulnerable until updated.

The vulnerability does not appear in CISA's KEV catalog, and the EPSS score is < 1%. The CVSS score is 5.5, indicating moderate severity. Exploitation would require a local environment with the ETM/perf subsystem active and a race condition between callbacks, which makes the attack surface narrower and the likelihood lower than remote exploits. The fix uses READ_ONCE/WRITE_ONCE to guarantee safety when callbacks preempt the disable callback.