The flaw lies in the RISC‑V ptrace subsystem where the kernel uses an incorrect register‑set identifier when constructing a core file. When a core dump is requested, this mismatch triggers a warning and causes the dump process to abort, so no core image is produced. The bug does not raise privileges or enable code execution; it merely prevents the collection of diagnostic information that would otherwise be useful after a fault.

All Linux kernels running on RISC‑V that lack commit 08200bef0983ffed039ab399df0cba8d900ce5fc are vulnerable. This includes any distribution kernel older than that revision or any custom build that has not applied the backported fix. The affected component is the ptrace subsystem of the kernel.

The problem is only observable during a core‑dump operation, so the attacker would have to trigger a kernel fault or otherwise cause a crash. With a very low EPSS score (below 1 %) and no listing in the CISA KEV catalog, the overall likelihood of exploitation is negligible. The flaw supplies no escalation path and only results in denial of the core‑dump capability.