A failure during the dup_mmap() routine when a memory allocation fails can leave the memory map tree in an unsafe state, exposing a partially initialised mm_struct to other iterators such as rmap and uprobe registrations. This incomplete mm_struct can be accessed before all initialization steps have completed, leading to potential memory corruption or kernel crashes. The kernel patch mitigates the issue by setting flags to skip OOM iterations and marking unsafely initialised mm_structs as unstable, thereby preventing their use during uprobe registration.

All Linux kernel builds that have not incorporated the patch introduced in commit 64c37e134b120fb462fb4a80694bfb8e7be77b14 are potentially vulnerable. The CNA list identifies the product as Linux kernel in general; no specific version range is listed, so any kernel prior to the application of the fix is at risk.

The CVSS score of 5.5 denotes a medium severity vulnerability, while the EPSS score of less than 1% indicates a low exploitation likelihood. The vulnerability is not present in the CISA KEV catalog, and there is no documented remote exploitation path. Based on the description, it is inferred that a privileged local attacker who can induce dup_mmap() failures could trigger a denial of service or memory corruption.