The vulnerability originates in the Linux kernel's BPF subsystem, where the __check_pseudo_btf_id() function incorrectly handles reference counting for BTF objects. This oversight can lead to a use-after-free condition, allowing an attacker to read or write memory after a BTF object has been freed. The flaw is a classic example of a use-after-free bug (CWE‑416). If exploited, it could compromise kernel memory integrity, potentially enabling arbitrary code execution with elevated privileges.

This issue affects any Linux installation that includes the kernel version prior to the fix present in the latest commit history (referenced in the provided Git links). No specific kernel version is listed in the CVE entry; therefore all kernels that have not yet applied the fix are potentially impacted.

The CVSS score of 7.8 indicates high severity. The EPSS score is < 1%, which suggests a low but non‑zero likelihood of exploitation. The vulnerability is not cataloged in CISA’s KEV. Attackers would need the ability to load BPF programs or otherwise invoke the flawed path to trigger the use‑after‑free, but no explicit exploitation chain is detailed in the CVE description.