A race condition exists between stopping the string parser and the reception routine, which can cause a use‑after‑free or crash. The fix replaces the race with a dummy lock sequence and changes stop/paused bits to prevent concurrent access. The weakness is consistent with a Use‑After‑Free vulnerability and could allow an attacker to trigger a crash or potentially execute arbitrary code if the exploit can be extended.

The flaw resides in the Linux kernel string parser and is relevant to any kernels that include the espintcp implementation of strp. No specific kernel version range is specified in the provided data, so any installation that uses this code path may be potentially affected.

The vulnerability exhibits a use‑after‑free condition that can cause memory corruption or a kernel crash. The CVSS score of 7.8 reflects a high severity rating, while the EPSS score of <1% indicates a low probability of exploitation in the wild. The feature is not listed in the CISA KEV catalog, suggesting that no publicly known exploits exist yet, though a published reproducer has shown the possibility of turning the race into an exploit. Attackers would likely need to deliver crafted packets to an instance of espintcp, a path that could be accessed over the network. Because the flaw can destabilize the kernel, organizations should treat this as a high‑risk issue and apply the upstream patch promptly.