The Linux kernel’s parameter handling for releasing the old value before the replacement allocation succeeded. If kmalloc_parameter() fails, the setter returns -ENOMEM with the parameter left as NULL. In this scenario, a later operation such as zswap’s compressor update can encounter a NULL pointer dereference, causing the kernel to BUG out and crash. This flaw is a a kernel panic, effectively denying service to the system.

All Linux kernel releases that have not yet incorporated the. The vulnerability is present in the kernel’s generic parameter handling code and manifests most prominently when the zswap module is initialized. No specific version range is listed, so all standard Linux kernels prior to the patch are potentially vulnerable.

The CVSS score of 4.1 indicates the flawV, suggesting limited exploitation in the wild. The likely attack vector is local privileged or kernel module configuration activity that can trigger the allocation failure path, leading to a kernel panic and system downtime. The EPSS score of < 1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. While not publicly exploitable at present, patching remains the safest course of action.