A race condition in the Linux kernel’s fsverity subsystem allows a concurrent __fsverity_get_info() call to access a freed fsverity_info structure. This use‑after‑free occurs when different inodes are processed, potentially allowing an attacker to manipulate kernel memory or execute arbitrary code after the structure is released.

All Linux kernel installations that include fsverity support and have not applied the RCU‑delay patch are affected. The precise kernel versions that lack the fix are not disclosed, but the issue exists in any kernel build where the mentioned race condition is present.

The vulnerability is a classic use‑after‑free in the kernel, with a CVSS score of 7.8 indicating a high-to-moderate severity. The EPSS score is less than 1%, and the vulnerability is not listed in CISA’s KEV catalog, which does not negate the risk of exploitation. The likely attack vector is local; an attacker that can trigger fsverity lookups or removals may achieve privilege escalation or arbitrary kernel code execution.