The Linux kernel's KCM (Kernel Connection Multiplexor) subsystem had a vulnerability where the function kcm_parse_func_strparser() called bpf_prog_run_pin_on_cpu(), which prevents CPU migration but did not establish an RCU read-side critical section. This omission allowed BPF map operations invoked from the KCM strparser program to trigger WARN_ON_ONCE(!bpf_rcu_lock_held()), indicating improper synchronization. The fix involved holding the RCU read lock while running the BPF program to ensure proper synchronization and prevent kernel warnings.

Improper synchronization in the kernel could lead to kernel warnings and potentially destabilize the system or cause crashes when BPF map operations are executed from the KCM strparser program. The CVSS score of 7.8 indicates a high impact on confidentiality, integrity, and availability, but no known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to hold the RCU read lock while running the BPF parser function in the KCM subsystem. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; check the official Linux kernel advisories for the exact fixed versions and apply updates accordingly.