The vulnerability in the Linux kernel involves a race condition in the network packet queuing mechanism during device unregistration, specifically in the enqueue_to_backlog() function. A lockless netif_running() check introduced to prevent queuing packets to an unregistering device created a TOCTOU race window. This allowed packets to escape backlog flushing and later trigger a kernel address sanitizer (KASAN) slab-use-after-free in fib_rules_lookup(). The fix moves the netif_running() check inside the backlog lock, ensuring serialization with the flush work and preventing packets from escaping flushing or being queued after device closure.

This vulnerability can lead to a use-after-free condition in the kernel, which may cause system instability or crashes. While no known exploits in the wild have been reported, the flaw could potentially be leveraged to disrupt kernel operations or cause denial of service.

A fix has been implemented in the Linux kernel that moves the netif_running() check inside the backlog lock to serialize it with the flush work. Users and administrators should apply the official kernel updates that include this fix once available. Patch status is not yet confirmed in the provided data; check the vendor advisory for current remediation guidance.