When an offloaded BPF map or program is queried for information, the functions involved call get_net() on a network device that may be in the process of being torn down. If the device’s network namespace reference count has already dropped to zero, get_net() attempts to increment a zero counter, triggering a use‑after‑free situation inside the kernel. This memory corruption can corrupt kernel state and may result in a kernel panic or undefined behavior, but the description does not indicate that it provides arbitrary code execution.

All systems running the generic Linux kernel before the fix referenced in the advisory are affected. The impact applies to every distribution that ships such kernels, regardless of package variant, until the patched kernel is deployed.

The CVSS score of 7.8 labels the flaw as high severity, while the EPSS score of less than 1% indicates a low probability of exploitation currently. The vulnerability is not listed in CISA KEV. Based on the description, the likely attack vector would need local or privileged access to load a BPF program that triggers the faulty info query while the network namespace is tearing down. No explicit data in the advisory details a successful exploitation method or resulting compromise beyond kernel corruption.