The flaw occurs when the Linux kernel attempts to unmap a virtual memory area that has already been detached during an mmap operation, causing a warning in vma_mark_detached(). The unmap logic is incorrect but does not provide a direct code‑execution or denial of service path; it merely results in an unnecessary warning and potential instability in the memory management subsystem.

All Linux kernel releases that include the mm/vma subsystem are potentially affected. The advisory does not list specific kernel release numbers, so affected versions are unknown. Distribution maintainers should verify whether their kernel contains the patch that corrects the unmap logic before determining impact.

The CVSS score of 7.8 indicates high severity. The EPSS score of < 1% shows a very low likelihood of exploitation. The vulnerability is not in CISA’s KEV catalog. An attacker would need local or privileged access that can trigger the faulty mmap path, such as through a driver that invokes mmap_prepare().