The vulnerability in the Linux kernel's af_unix module arises from a race condition in the unix_gc() function where the gc_in_progress flag was not set to true during garbage collection. This allowed multiple concurrent garbage collection scheduling threads to run with gc_in_progress false, leading to potential confusion in the garbage collection process, specifically affecting unix_peek_fpl() which relies on this flag to avoid incorrect garbage collection triggered by MSG_PEEK. The fix involved setting gc_in_progress to true inside unix_gc() to prevent this race condition.

The vulnerability can cause incorrect behavior in the Unix socket garbage collection process, potentially leading to denial of service or corruption of internal kernel data structures related to socket garbage collection. The CVSS vector indicates local attack complexity with low privileges required, no user interaction, and impacts on integrity and availability, but no confidentiality impact.

A fix has been implemented in the Linux kernel to set gc_in_progress to true within unix_gc(), resolving the race condition. Users should update to the patched Linux kernel version containing this fix once it is available. Patch status is not yet confirmed in the provided data; check the official Linux kernel advisories for the exact fixed versions and patch availability.