In the Linux kernel tracing subsystem, a flaw occurs when the allocation function for a map element fails. The code still attempts to free an element that was not successfully allocated, which results in an invalid free operation that can crash the kernel. The weakness is catalogued as CWE‑1341. The adverse impact is a kernel panic or denial of service, potentially affecting system availability. Based on the description, it is inferred that the crash occurs only if the faulty free is executed after a failed allocation.

The vulnerability affects the tracing component of the Linux kernel. The cpe entries indicate all Linux kernel releases, and particular 7.1 release candidate branches were referenced in the advisory. Any running kernel that includes the vulnerable tracing code path, whether current or legacy, may be subject to the issue until the patch is applied.

The CVSS score of 5.5 reflects moderate severity. The EPSS score is less than 1%, suggesting a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local, requiring the attacker to trigger a tracing path that fails allocation and then invoke the misfree; remote exploitation would require elevated privileges or additional conditions. Because the flaw leads to an invalid free, an attacker who can execute code in kernel context may be able to crash the system or use repeated crashes to force undesired behavior.