The vulnerability in the Linux kernel's sunrpc component arises from race conditions during the asynchronous TLS handshake. Specifically, svc_tcp_handshake() stores a raw svc_xprt pointer without proper reference counting before submitting a TLS handshake request. Concurrent connection close events can cause svc_sock_free() to free memory while callbacks still access it, leading to use-after-free and slab corruption. The fix involves taking a reference on svc_xprt before the handshake submission and releasing it appropriately to prevent callbacks from accessing freed memory.

This vulnerability can cause memory corruption in the kernel due to use-after-free conditions during TLS handshake processing on NFS servers. The corruption manifests as slab allocator corruption, which can lead to kernel instability or crashes. There is no information about active exploitation in the wild or direct privilege escalation, but kernel memory corruption vulnerabilities carry a risk of denial of service or potential escalation depending on exploitability.

A fix has been implemented in the Linux kernel to properly manage references to svc_xprt during the TLS handshake, preventing use-after-free conditions. Users should apply the official kernel updates that include this patch. Since this is not a cloud service, remediation depends on deploying updated kernel versions. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or Linux kernel mailing lists for the exact fixed versions and update accordingly.