A flaw in the Linux kernel’s ring‑buffer implementation allows a non‑consuming reader to trigger a use‑after‑free when resizing is disabled. This use‑after‑free vulnerability corresponds to CWE‑416 and CWE‑825. The vulnerable function frees buffer pages while the reader might still advance the iterator, leading to a kernel memory corruption that can be abused to execute arbitrary code or crash the system.

All Linux kernel builds are potentially affected until the fix is included. The CVE data does not list specific versions, so any release prior to the patched commit is considered vulnerable.

The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, leaving the exact exploitation likelihood uncertain. The CVSS score of 7.8 indicates high severity. Based on the description, the likely attack vector is a local attacker with the ability to influence ring‑buffer usage, which could lead to privilege escalation or denial of service. Remote exploitation is unlikely without additional local access.