In the Linux kernel a race condition exists when the UDP output fallback clears the bind's local address in place. The bind is published via RCU and read locklessly by other traffic, so an IPv6 reader can observe a torn address. This can cause invalid memory accesses, route lookup failures and potentially kernel instability or crashes. The weakness is a race condition that may lead to memory corruption (CWE‑1003, CWE‑119).

Any Linux kernel installation that incorporates the vulnerable binding code is affected. The advisory does not list specific version ranges, so all kernel versions prior to the patch referenced in the coupled commit are considered at risk, regardless of distribution.

The vulnerability has no reported public exploits and its EPSS score is unavailable, indicating a low to moderate likelihood of active exploitation. It is not listed in CISA KEV. As it requires concurrent access to kernel memory, a local or privileged attacker who can induce the specific UDP dispatch path would be able to trigger the race and exploit it. In the absence of confirmed exploits, the risk is primarily theoretical but should be mitigated with the available patch.