The vulnerability exists in the Linux kernel's AppArmor integration. A function that resolves the current executable path retains both an executable file reference and a path reference before successfully resolving the path name. If the path resolution fails, the function returns prematurely but fails to release the acquired references, resulting in a resource leak. This flaw can consume kernel resources over time and may be exploited to degrade system availability.

Linux operating systems that run kernel versions containing the unpatched AppArmor code are impacted. The flaw applies to all distributions that ship the kernel with the referenced AppArmor components before the fix was introduced.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of <1% reflects a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires local privilege or the ability to influence path resolution failures; thus it is considered a local or privileged threat, potentially enabling a denial of service by exhausting kernel resources. No immediate remote exploitation path is described in the supplied information.