The vulnerability originates from a NULL pointer dereference in the kernel’s tracing subsystem when a module‑only event filter is removed from the cache. Triggering the error causes the Linux kernel to crash and reboot, disrupting system availability for all processes including privileged services. Because the fault occurs within the core kernel, it does not provide an attacker with direct code execution or privilege escalation; the impact is strictly limited to denial of service.

All Linux kernel releases that contain the unfixed tracing code are affected. The exact version range is not specified, but the issue was present in kernels that had a module‑only event filter causing a NULL cached match when the module was not loaded. The fix applies broadly across Linux distributions, so any distribution using a kernel older than the patch contains the flaw.

The EPSS score is currently unavailable and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploit activity yet. However, the attack vector requires write access to /sys/kernel/tracing/set_event, which is typically restricted to privileged users. If an attacker can obtain such access, they can easily reproduce the crash by echoing a malformed filter into the file. Given the lack of a CVSS score, the severity cannot be quantified precisely, but the confirmed kernel panic indicates a high impact on availability.