Impact
A flaw in the Linux kernel’s ring‑buffer implementation allows a non‑consuming reader to trigger a use‑after‑free when resizing is disabled. The vulnerable function frees buffer pages while the reader might still advance the iterator, leading to a kernel memory corruption that can be abused to execute arbitrary code or crash the system.
Affected Systems
All Linux kernel builds are potentially affected until the fix is included. The CVE data does not list specific versions, so any release prior to the patched commit is considered vulnerable.
Risk and Exploitability
The EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog, leaving the exact exploitation likelihood uncertain. A local attacker with the ability to influence ring‑buffer usage can exploit the use‑after‑free path, which may elevate privileges or result in denial of service. The preferred attack vector is local kernel exploitation; remote exploitation is unlikely without additional local access.
OpenCVE Enrichment