In the Linux kernel tracing subsystem, a flaw occurs when the allocation function for a map element fails. The code still attempts to free an element that was not successfully allocated, which can result in an invalid free operation. This flaw may cause a kernel crash or other instability, as the free operation is performed on a potentially invalid or uninitialized pointer. The weakness involved is catalogued as CWE-1341.

The issue affects the Linux kernel tracing component. No specific kernel release versions are listed in the advisory, so the vulnerability may potentially exist in all current and legacy kernel branches until a patch is applied. Administrators should check if their running kernel contains the traced code paths that trigger this mis‑free.

The CVSS score of 5.5 indicates a moderate severity, while the EPSS score of less than 1% suggests a low probability of exploitation. The vulnerability is not in the CISA KEV catalog. A local attacker with privileges to trigger the tracing path that leads to a failed allocation could potentially cause kernel instability or a crash; remote exploitation would require additional conditions. Existing mitigations are limited; the primary defense is updating to a kernel that includes the fix.