A race condition in the Linux dm-crypt subsystem occurs when the function crypt_dec_pending reads the I/O error status before decrementing a reference counter. Because the operation may be interrupted, a stale error value can remain and cause a failed read or write to be reported as successful. This improper status reporting can lead to data integrity problems or mis‑trust in the encryption layer. The weakness is a classic race condition (CWE-362).

All versions of the Linux kernel that contain the dm‑crypt module prior to the fix commit are affected. The specific affected releases are not enumerated in the advisory, but the issue applies to any kernel using the legacy dm‑crypt implementation.

The CVSS score is not provided and the EPSS score is unavailable, so the precise exploitation probability is unknown. The vulnerability is internal to the kernel and does not grant a malicious user direct code execution or privilege escalation. Exploitation would require deliberate manipulation of concurrent I/O operations on an encrypted device and is therefore considered a moderate risk for systems that rely on accurate error reporting. The issue is not listed in the CISA KEV catalog, indicating that no widespread incidents have been reported.