The Linux kernel contained a vulnerability where the ipv4_sysctl_exit_net() function freed net->ipv4.sysctl_local_reserved_ports prematurely, before unregister_net_sysctl_table() completed. This premature freeing could allow threads to access freed memory via sysctls such as /proc/sys/net/ipv4/ip_local_reserved_ports, leading to potential instability or security issues. The fix ensures that net->ipv4.sysctl_local_reserved_ports is freed only after unregister_net_sysctl_table() confirms no threads can use the sysctls.

The vulnerability could lead to use-after-free conditions in the kernel's IPv4 sysctl handling, potentially causing system instability or enabling an attacker to exploit memory corruption. However, no known exploits in the wild have been reported. The exact impact depends on the ability to trigger concurrent access to freed memory in the kernel.

A fix has been implemented in the Linux kernel to address this issue by adjusting the timing of freeing net->ipv4.sysctl_local_reserved_ports. Since no patch links or vendor advisories are provided, users should monitor official Linux kernel releases and update to the fixed version when available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.