This flaw resides in the Linux kernel’s slab allocator memory‑zeroing logic. When the kernel is configured with only red zoning enabled, the zeroing routine incorrectly uses the full object size instead of the user‑requested allocation size, violating the __GFP_ZERO guarantee. As a result, residual data from previous allocations can be retained in the memory region and may be read by subsequent kernel operations, leading to information disclosure.

Vendors: Linux kernel. All releases prior to the applied patch that compile with the SLAB_RED_ZONE configuration without SLAB_STORE_USER are affected. The flaw is independent of distribution or patch level; any kernel that has not been updated to the release containing the fix is vulnerable.

The CVSS score of 8.1 signals a high severity vulnerability. The EPSS score is reported as < 1 %, indicating a very low probability of current exploitation, and the vulnerability is not listed in the CISA KEV catalog. The vulnerability requires the kernel to be built with red zoning enabled and without user‑size tracking, which is a specific configuration. While an exploitation path is conceivable through privilege escalation or a local attacker gaining kernel memory allocation control, the attack vector is inferred rather than explicitly documented in the advisory. Overall risk remains low but non‑zero from a confidentiality perspective.