In the Linux kernel BPF subsystem, the function visit_tailcall_insn returns an error when a tail call fails, but the caller does not check this return value. This unchecked return value flaw (CWE-252) means that error conditions can go unnoticed, potentially leading to unintended behavior in BPF execution.

All Linux kernel releases that contain the visit_tailcall_insn path before the inclusion of commit e40f5a6bf88a are affected. This includes every kernel version released prior to that commit, as well as any derivative kernel that reintroduces the same code path. Any Linux distribution running such an unpatched kernel is at risk.

The CVSS score of 8.4 indicates high severity, while the EPSS score of < 1% indicates a low probability of active exploitation. The vulnerability is not listed in the CISA KEV catalog. No specific attack vector is described in the CVE, but the likely attack vector involves loading a BPF program that triggers the faulty tail call. Based on the description, it is inferred that an attacker would need sufficient permissions to load BPF programs, which typically requires privileged access.