The vulnerability originates from a NULL pointer dereference in the kernel’s tracing subsystem when a module‑only event filter is removed from the cache. Triggering the error causes the Linux kernel to crash and reboot, disrupting system availability for all processes including privileged services. Because the fault occurs within the core kernel, it does not provide an attacker with direct code execution or privilege escalation; the impact is strictly limited to denial of service.

All Linux kernel releases that contain the unfixed tracing code are affected. The exact version range is not specified, but the issue was present in kernels that had a module‑only event filter causing a NULL cached match when the module was not loaded. The fix applies broadly across Linux distributions, so any distribution using a kernel older than the patch contains the flaw.

The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, suggesting limited exploitation activity. However, the attack vector requires write access to /sys/kernel/tracing/set_event, which is typically restricted to privileged users. If an attacker can obtain such access, they can easily reproduce the crash by echoing a malformed filter into the file. The CVSS score of 5.5 indicates a medium severity, but the confirmed kernel panic indicates a high impact on availability.