The vulnerability originates in the Linux kernel’s BPF subsystem, where the regsafe() function may incorrectly report a packet pointer as safe when the range condition is beyond the packet end. Based on the description, it is inferred that this flaw is local in scope, affecting only processes that can load BPF programs. This logic error does not directly lead to memory corruption or information disclosure, but it can prevent a BPF program from executing over a valid packet range, potentially causing functional failure or unintended behavior. The weakness is tied to a validation flaw (CWE‑372).

All Linux kernel releases that include the BPF subsystems before the patch commit are susceptible. The issue is in the core kernel code rather than a vendor‑specific package, so any system running an unpatched kernel is affected.

The flaw is local and consumes the ability to load or execute a BPF program, typically through socket filters or tracepoints. The EPSS score is less than 1 % and the vulnerability is not listed in the CISA KEV catalog, indicating a low exploitation probability. The CVSS score of 7.8 reflects high severity for environments that allow arbitrary BPF code to be loaded, but the threat is limited to those contexts. Based on the description, it is inferred that the likely attack vector is local, involving BPF program loading via socket filters or tracepoints.