The vulnerability in the Linux kernel's TLS async decryption arises when the function tls_strp_msg_hold fails to create a clone of the input skb (socket buffer) to hold memory references. If this cloning fails and async decryption proceeds, it can cause use-after-free conditions on the skb and writes into userspace memory after the recv() call has returned. The resolved fix involves waiting for all pending decryption requests to complete if cloning fails, thereby preventing unsafe memory operations.

Successful exploitation can lead to use-after-free conditions and unauthorized memory writes into userspace, which may result in system crashes, data corruption, or potential privilege escalation. The vulnerability affects confidentiality, integrity, and availability of the system, as indicated by the CVSS vector with high impact on all three.

A fix for this vulnerability has been implemented in the Linux kernel. Users and administrators should apply the official kernel updates that include this fix. Since this is a kernel-level issue, upgrading to a patched kernel version is the recommended remediation. Patch status is not explicitly stated in the provided data; therefore, verify the vendor advisory or Linux kernel mailing lists for the exact fixed versions and apply updates accordingly.