Based on the description, it is inferred that the vulnerability occurs when a tracepoint goes from the unregistered to the registered state; the subsystem’s registration function runs, but the probe installation fails, leaving the cleanup function uninvoked. This omission causes reference counts for syscall tracepoints to remain elevated, so every task continues to pay the overhead of trace entry and exit, which in turn can degrade system performance into a denial of service if the issue repeats. The missing unregistration is a classic CWE‑459 weakness, representing failure to release resources in all execution paths.

All Linux kernel releases that include the buggy tracepoint_add_func implementation are affected until the patch is applied. No specific sub‑version list is provided, so the vulnerability applies to all current Linux kernels that have not yet incorporated the fix.

The CVSS score of 5.5 indicates moderate severity. The EPSS score of less than 1% suggests a low probability of exploitation, and the vulnerability has not been listed in the CISA KEV catalog. Exploitation requires causing a probe allocation failure, typically by inducing memory pressure or otherwise triggering allocation errors, so the likely attack vector is local kernel interaction or sustained resource exhaustion. If successful, the unbalanced reference counts can lead to a system‑wide denial of service.