The vulnerability originates in the Linux kernel’s BPF subsystem, where the regsafe() function may incorrectly report a packet pointer as safe when the range condition is beyond the packet end. This logic error, tied to the validation flaw CWE‑372 and the unsafe pointer handling CWE‑682, can prevent a BPF program from executing over a valid packet range, potentially leading to functional failure or unintended behavior. The scope is not explicitly stated in the data; it is inferred that the flaw is local, affecting only processes that can load BPF programs, and does not directly lead to memory corruption or information disclosure.

All Linux kernel releases from 7.0‑rc1 to 7.0‑rc6 are affected, as the vulnerability exists in the BPF subsystem before the commit that fixes regsafe(). Since this flaw resides in the core kernel rather than any vendor‑specific package, any system running one of these kernels without the patch is vulnerable.

The flaw is local and consumes the ability to load or execute a BPF program, typically through socket filters or tracepoints. The EPSS score is less than 1 % and the vulnerability is not listed in the CISA KEV catalog, indicating a low exploitation probability. The CVSS score of 7.8 reflects high severity for environments that allow arbitrary BPF code to be loaded, but the threat is limited to those contexts. Based on the description, it is inferred that the likely attack vector is local, involving BPF program loading via socket filters or tracepoints.