The vulnerability arises in the Linux kernel tracing subsystem where synthetic variable names and histogram commands are built by appending strings into a fixed MAX_FILTER_STR_VAL buffer with the unsafe C library function strcat. When an attacker supplies a key list, field name, or filter that exceeds the buffer size, the resulting overflow corrupts kernel memory. This uncontrolled buffer overflow (CWE‑120) can lead to a kernel crash or, if the corruption is controlled, to arbitrary code execution with kernel privileges.

The flaw impacts all Linux kernel builds that include the unpatched tracing code. Any distribution using the default Linux kernel where the seq_buf bounds patch has not been applied remains vulnerable. No specific kernel release numbers are specified, so the risk applies to every kernel version that predates the fix.

The CVSS score is 7.0, the EPSS score is below 1%, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local, requiring the attacker to invoke tracing commands that generate long synthetic fields. While exploitation complexity appears low for a knowledgeable attacker who can trigger the overflow, the very low EPSS indicates that widespread exploitation is currently unlikely. Nevertheless, the potential for kernel privilege escalation makes this a significant risk for exposed systems.