The vulnerability in the Linux kernel's IIO event subsystem involves a race condition between resetting the event FIFO and the installation of the event file descriptor in the process file descriptor table. The function iio_event_getfd() creates the event file descriptor with anon_inode_getfd(), which installs the fd before returning. The FIFO reset was previously done after this, allowing another thread to guess and read from the new fd concurrently. This leads to unsafe concurrent access to the FIFO, violating kfifo's concurrency requirements and potentially causing the FIFO 'out' index to advance incorrectly. This results in an out-of-bounds read that can leak kernel memory to userspace. The patch moves the FIFO reset before anon_inode_getfd(), ensuring the fd is not accessible during reset and eliminating the race.

An attacker with the ability to access the IIO event file descriptor concurrently from multiple threads could exploit this race condition to cause an out-of-bounds read from kernel memory. This could lead to leakage of sensitive kernel memory contents to userspace, potentially exposing sensitive information. There is no indication of known exploits in the wild. The vulnerability affects kernel memory confidentiality but does not describe privilege escalation or denial of service.

A fix has been implemented that moves the FIFO reset to occur before the event file descriptor is created and installed, preventing concurrent unsafe access. Since the vulnerability has been resolved in the Linux kernel source, users should update to a kernel version that includes this fix. Patch status is not explicitly stated in the input data; therefore, check the official Linux kernel advisories or distribution security updates for the fixed version and apply the update accordingly.