The EVTCHNOP_expand_array hypercall performs a check for FIFO event channels being enabled but does so without acquiring the appropriate lock. This improper synchronization can lead to a race condition with the EVTCHNOP_reset hypercall, resulting in a NULL pointer dereference. This vulnerability is identified as CWE-362 (Race Condition) and has a CVSS 3.1 vector indicating network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability at a low level each.

Exploitation of this race condition can cause a NULL pointer dereference, which may lead to denial of service or potential system instability. The CVSS base score indicates low confidentiality, integrity, and availability impacts, but the overall severity is high due to the nature of the race condition and potential system crashes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided at this time. Until a patch is available, users should monitor vendor advisories for updates and consider mitigating exposure by limiting access to the vulnerable hypercall if possible.