A concurrency flaw was found in the netfilter ipset module of the Linux kernel where RCU‑protected sections were incorrectly marked. In the affected code paths a reference counter is incremented without the proper RCU lock guarding the associated hash table, potentially allowing a race condition that could corrupt shared state or invoke dangling references when the ipset structure is accessed. The result of such a fault is kernel instability or a crash, which could allow an attacker to gain kernel‑level privileges if the crash is leveraged in a broader exploit chain. The description does not state that the vulnerability has been demonstrated in the wild or that a particular privileged or non‑privileged context is required.

All Linux kernel installations that include the netfilter ipset component before the commit that fixed the RCU lock handling. This encompasses every distribution running a kernel version that has not incorporated the patch from the Linux repository. Any system using an unsupported or custom kernel build that still contains the vulnerable ipset module is also at risk.

The CVE description does not provide explicit information about how an attacker could trigger the fault or whether additional privileges are required. Because the flaw involves concurrent access to RCU‑protected data, it is conceivable that crafted network traffic could manipulate the ipset hash table, but no concrete attack vector has been documented. The EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog, indicating that there are no confirmed active exploits at the time of this analysis. Given the potential for a kernel crash, the risk is considered high, but the precise exploitation likelihood remains uncertain.