The vulnerability in the Linux kernel verifier logs arises because several pseudo pointer types are not masked, causing container-friendly pointer values to be printed to log output. When an attacker can read those logs, kernel memory addresses may be exposed, potentially aiding subsequent attacks that rely on knowledge of kernel address space layout. No evidence indicates that the flaw directly results in remote code execution or denial of service. The primary consequence is the leakage of sensitive kernel internals. The likely attack vector is local: an actor with access to kernel logs or the ability to trigger BPF verifier log output can exploit the information disclosure.

Linux kernel installations are affected, as the flaw is present in the generic kernel source. The issue exists in all releases before the patch that expands the pointer masking logic to include BPF_PSEUDO_MAP_IDX, BPF_PSEUDO_MAP_IDX_VALUE, and BPF_PSEUDO_BTF_ID. No specific vendor or version boundaries are provided.

Because no CVSS score is available, the severity is not quantified, but the vulnerability permits the compromise of confidentiality by leaking kernel pointers. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, indicating it is not confirmed as currently exploited in the wild. Exfiltration requires read access to kernel logs, suggesting a primarily local exploitation scenario. Attackers may chain this information disclosure with other vulnerabilities that benefit from known kernel addresses to reduce randomization barriers.