The flaw occurs when the Linux kernel’s shadow stack routine shstk_pop_sigframe() fails to verify the return value of mmap_read_lock_killable(). Because the routine continues execution with an invalid or missing lock, kernel data structures may be incorrectly accessed or modified, leading to a crash or corrupt state. The vulnerability is an example of improper resource locking, a weakness that can impair system stability and availability.

All versions of the Linux kernel that contain the unpatched shstk_pop_sigframe implementation are vulnerable. The product impacted is the Linux kernel; the vendor is Linux. No specific version range is listed, so any build prior to the inclusion of the fix is potentially affected.

The EPSS score of < 1% and absence from CISA KEV indicate that no large‑scale exploitation activity is known. The CVSS score of 5.5 denotes moderate severity; exploitation would likely require local privileged or kernel execution authority. Remote exploitation without such privileges is improbable. Overall, the risk is moderate, increasing to high if the flaw is successfully leveraged to trigger a kernel panic.