The Linux kernel fails to mark the bpf_refcount field as unique, allowing reference counters for BPF objects to be incorrectly shared or duplicated. This can lead to memory corruption or unpredictable kernel behavior when objects are freed or modified, potentially causing kernel panics or loss of service. The primary impact is kernel instability that could affect system availability and may result in denial of service.

All Linux kernel installations older than the commit that marks BPF_REFCOUNT as unique are affected. The flaw resides in core kernel code, so any unpatched system could be vulnerable until a newer kernel version incorporates the fix.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% points to a low exploitation probability. The vulnerability is not listed in the CISA KEV catalog, and no public exploits have been reported. Based on the affected component and the requirement to inject or load BPF programs, the likely attack vector is local and requires capabilities to load malformed or crafted BPF code.