In the Linux kernel a flaw in namespace handling allows a process to obtain a reference to a candidate namespace before confirming that the caller has permission to list that namespace. If the permission check fails, the kernel may release the reference while an RCU read‑side locking context is still active. The CVE logs describe a voluntary context switch within that RCU critical section, which can cause kernel warnings and potentially lead to a system hang or crash. The weakness is a misuse of RCU synchronization that can degrade availability; it does not provide code execution or privilege escalation.

The vulnerability affects Linux kernel releases that contain the legacy namespace reference logic before the patch that enforces permission checks prior to taking a reference. It is observed in the Ubuntu 7.0.0‑30‑generic kernel and applies to any upstream kernel build that has not incorporated the commit that introduces the proper ordering of checks.

The CVSS score of 7.8 indicates high severity, while the EPSS score of < 1% shows a very low likelihood of exploitation. The vulnerability is not listed in CISA KEV. The likely attack scenario involves a local user invoking the listns system call, which triggers the bug. This inference is based on the call trace in the CVE description. If exploited, the context‑switch warning may indicate a possible kernel hang or crash, resulting in a denial of service. No public exploit is documented.