A local pointer variable in the Linux kernel annotated with the cleanup attribute __cleanup(kfree) caused the kernel to deallocate the address of a stack variable instead of the memory allocated by kmalloc. The resulting improper deallocation triggers a crash when kfree attempts to free a stack address, leading to a kernel panic. This flaw does not provide direct code execution or data exfiltration but can interrupt system operations by causing a kernel denial of service.

All Linux kernel installations that include the affected code path are susceptible. The patch referenced in the CVE description was merged into the mainline kernel, so older kernels lacking this commit are at risk, while newer kernels incorporating the commit are expected to be safe. No vendor or version details are provided beyond the kernel itself.

The vulnerability has no known public exploits and is not listed in the CISA KEV catalog. EPSS data is unavailable, so the likelihood of exploitation remains uncertain. Because the flaw requires kernel-level execution, the risk is primarily for local privilege or compromised environments. From an availability standpoint, the crash severity is high, but the lack of a remote attack vector or exploitation evidence keeps the overall threat moderate. Updating the kernel to a version that contains the fix is the recommended risk mitigation.