The vulnerability concerns the Linux kernel's futex robust exit handling, where a robust futex unlock operation clears the futex value and wakes a single waiter. If the woken waiter is killed before it can re-arm the FUTEX_WAITERS bit or acquire the futex, and another thread acquires the futex via the fast path, the FUTEX_WAITERS bit is lost. Consequently, remaining waiters can sleep indefinitely behind a free futex. The fix improves robust list exit processing to perform an additional wakeup if the futex is owned by another thread but FUTEX_WAITERS is not set, preventing waiters from sleeping forever. This patch does not address all futex contention and free sequence issues but mitigates this specific race condition.

Affected systems running vulnerable Linux kernel versions may experience indefinite blocking of threads waiting on futexes due to lost wake notifications. This can lead to application hangs or deadlocks where threads sleep forever waiting on futexes that are no longer properly signaled. There is no indication of remote code execution or privilege escalation from this vulnerability. The impact is primarily denial of service at the thread or process level.

A fix for this vulnerability has been implemented in the Linux kernel. Users should update to a kernel version that includes this patch to prevent indefinite futex wait hangs caused by this race condition. Since this is a kernel-level fix, applying the official kernel update from the vendor or distribution is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult their Linux distribution's security advisories for the exact fixed versions and update accordingly.