The vulnerability in the Linux kernel tracing subsystem arises from a race condition between event_define_fields() and update_event_fields() functions. When two CPUs concurrently load different kernel modules, unsynchronized access to the class->fields linked list can occur because event_mutex is not held in trace_event_update_all(). This leads to a kernel panic with an invalid memory access at a null pointer offset. The issue is fixed by taking the event_mutex lock in trace_event_update_all() before acquiring trace_event_sem, ensuring proper synchronization and preventing the race.

Exploitation of this race condition can cause a kernel panic, resulting in a denial of service by crashing the system. There is no indication of privilege escalation or arbitrary code execution from the provided information.

A fix has been implemented that takes the event_mutex lock in trace_event_update_all() before trace_event_sem to prevent the race condition. Users should apply the official Linux kernel update that includes this fix once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.