The Linux kernel bug occurs in the phonet networking stack where the function pep_get_sb() fails to re-fetch the packet header after pskb_may_pull() might have relocated skb data. This oversight leads to a use‑after‑free, causing kernel memory corruption. The CVE description does not explicitly state exploitation results, but a UAF can potentially allow an attacker to read or write protected kernel memory if they can influence packet processing, which could lead to arbitrary code execution in the kernel.

All Linux kernel installations that contain the phonet subsystem and have not applied the fix commit 0f71f852a96af9685858ce59fda34ecbf85c283d are at risk. No specific version range is provided, so any kernel containing the vulnerable code should be considered affected.

The vulnerability carries a high severity, with a CVSS score of 9.8 indicating significant impact at the kernel level. The EPSS score is below 1%, suggesting very low probability of exploitation at present, and the issue is not listed in the CISA KEV catalog. Based on the nature of the bug, it is inferred that an attacker could trigger the use‑after‑free by sending crafted packets to the phonet interface, indicating a network‑based attack vector. If successfully exploited, the attacker might read or write protected kernel memory, potentially leading to privilege escalation or denial of service.