A race condition exists between stopping the string parser and the reception routine, which can cause a use‑after‑free or crash. The flaw was discovered by illustrating a reproducer that turns the potential UAF into an exploit. The fix replaces the race with a dummy lock sequence and changes stop/paused bits to prevent concurrent access. This weakness is consistent with a Use‑After‑Free vulnerability and could allow an attacker to trigger a crash or potentially execute arbitrary code if the exploit can be extended.

The flaw resides in the Linux kernel string parser and is relevant to any kernels that include the espintcp implementation of strp. No specific kernel version range is specified in the provided data, so any installation that uses this code path may be potentially affected.

The CVSS score is not reported, and EPSS data are unavailable, so the assessed severity cannot be quantified precisely. However, the vulnerability can lead to a kernel crash and potential privilege escalation if an attacker can control the espintcp data flow. The likely attack vector, inferred from the nature of the vulnerability, would involve a network‑based trigger toward a vulnerable espintcp instance. The flaw is not listed in the CISA KEV catalog, indicating no publicly known exploitation, but the presence of a working reproduction suggests that a local or remote attacker could potentially exploit it if they can deliver crafted packets to a running espintcp process.