A race condition in the Linux kernel device‑mapper module allows dm_table_get_mode to dereference freed memory when do_resume calls it without acquiring the required lock. This use‑after‑free read can corrupt kernel space and cause a crash, resulting in a denial of service. The flaw is categorized as a race‑condition bug and is not considered a security vulnerability for unprivileged users because it can only be triggered through a concurrent sequence of privileged ioctl calls.

All Linux kernel releases that incorporate the device‑mapper implementation before the commit that fixes the race in do_resume are affected. Because the affected version range is not enumerated, any kernel older than the patch should be treated as vulnerable until the updated kernel is installed.

The CVSS score of 4.4 indicates low severity, the EPSS score is less than 1%, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires root privileges and a rare concurrency between ioctl calls that are not normally performed by standard system tools, making real‑world exploitation highly unlikely while still allowing a root attacker to cause a system crash.