A race condition in the Linux kernel allows a process to read the parent of a mount that has already been unmounted while holding the mount lock, potentially dereferencing freed memory. This use‑after‑free can corrupt kernel memory, leading to a crash or unpredictable behavior, but no direct path to privilege escalation is described in the advisory.

All Linux kernel deployments that include the statmount handling code prior to the commits that address this race. Because no specific kernel versions are listed, the vulnerability could affect current kernels as well as legacy builds that have not applied the patch referenced in the advisory.

The EPSS score is less than 1%, the CVSS score is 5.5, and the flaw is not listed in CISA’s KEV catalog. The use‑after‑free is likely to cause kernel instability rather than direct code execution, and exploitation would require local privileged access to orchestrate the race. Given the moderate CVSS score and low exploitation probability, patching remains the recommended countermeasure.