The Linux kernel bug involves the BPF helper function bpf_get_fsverity_digest(), which fails to properly validate the digest_size field when it is concurrently modified. This race condition can cause the helper to read an invalid value, leading to a crash of the kernel or the BPF verifier. The primary impact is a denial of service for the affected system, as a kernel panic or process termination can be triggered.

All installations of the Linux kernel that contain the buggy bpf_get_fsverity_digest() implementation before the patch commit are affected. The specific affected kernel versions are not enumerated in the advisory, so any kernel release prior to the inclusion of the fix may be vulnerable. The bug is present in the core Linux kernel (Linux:Linux).

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating limited public exploitation data. Nevertheless, the attack requires the ability to load a BPF program with the bpf_get_fsverity_digest() helper, suggesting that privileged or local users can trigger the crash. The lack of remote exploitation paths and the need for kernel modification limits the risk to environments where user‑supplied BPF programs are executed. However, within those contexts, the crash could be leveraged to cause a denial of service.