The vulnerability exists in the Linux kernel's AppArmor integration. A function that resolves the current executable path retains both an executable file reference and a path reference before successfully resolving the path name. If the path resolution fails, the function returns prematurely but fails to release the acquired references, resulting in a resource leak. This flaw can consume kernel resources over time and may be exploited to degrade system availability.

Linux operating systems that run kernel versions containing the unpatched AppArmor code are impacted. The flaw applies to all distributions that ship the kernel with the referenced AppArmor components before the fix was introduced.

Explicit CVSS data is not provided, and the EPSS score is unavailable. The vulnerability is listed as not in the CISA KEV catalog. The likely attack vector would require local privilege or the ability to influence path resolution failures; thus it is considered a local or privileged threat, potentially enabling a denial of service by exhausting kernel resources. No immediate remote exploitation path is described in the supplied information.