The Linux kernel liveupdate feature contained a TOCTOU race condition in the luo_session_retrieve() function. The vulnerability arose because the read lock (rwsem_read) did not cover the entire critical section, allowing a concurrent thread to release and free the session after lookup but before the session mutex was locked. This race could cause unsafe access to freed memory or inconsistent session state. The fix extends the scope of the rwsem_read lock to overlap with the session mutex acquisition, eliminating the race window.

The race condition could allow concurrent threads to access or manipulate freed session data, potentially leading to kernel instability or memory corruption. No known exploits in the wild have been reported. The impact is limited to concurrency issues within the liveupdate kernel component.

A fix has been implemented in the Linux kernel to extend the locking scope and prevent the TOCTOU race. Users should apply the official kernel updates that include this fix. Since this is a kernel-level concurrency issue, updating to the patched kernel version is the recommended mitigation.