The Linux kernel contains a race condition in the slab allocator where concurrent allocation and deallocation of objects can corrupt the internal free list. The bug occurs when one CPU frees an object to a slab that has a NULL freelist, while another CPU concurrently allocates from that slab and removes it from the partial list. This race causes list_add corruption and ultimately a kernel panic, shutting down the system. The impact is a denial of service because the kernel crash stops all operations and can lead to data loss.

All Linux kernel builds that include the buggy slab allocator code are affected. The vendor listed is Linux, and the product is the Linux kernel. Any kernel prior to the commit that re‑locks around the slab list manipulation (e.g., ba7425312607 or later) is at risk.

The CVSS score of 7.8 indicates high severity. The EPSS score is < 1%, indicating a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires a multi‑CPU environment and a workload that heavily exercises the slab allocator. While the race condition is nondeterministic and the exploit path is non‑trivial, the listed consequence of a kernel panic makes the risk high for systems running vulnerable kernels. With no public exploits reported, the problem remains theoretical but warrants proactive remediation.