The vulnerability arises from a bug in the BPF subsystem that leads to a null pointer dereference when processing a scalar register stored into a kptr slot, causing a kernel panic. This denial‑of‑service condition can abruptly bring down the operating system and affect high‑availability services, but the description does not mention privilege escalation or data exposure.

The affected product is the Linux kernel. No specific kernel release numbers are provided in the data, so any kernel version containing the unpatched implementation of map_kptr_match_type is potentially impacted. The flaw was addressed in commit ab6c637ad027, which is included in recent kernel releases from major distribution vendors. All distributions that ship standard Linux kernels are thus potentially affected.

Exploitation requires the ability to load or execute an eBPF program that triggers the faulty path, implying a local or privileged attacker scenario. Because the EPSS score is not available, the likelihood of exploitation is unknown. The CVSS details are not supplied, but a null dereference in kernel space is conventionally considered high severity for denial of service. The vulnerability is not listed in the CISA KEV catalog.