The flaw resides in the Linux kernel’s ELF parsing logic that fails to validate that string table sections are of type SHT_STRTAB before accessing their offsets. As a result, the kernel can read beyond the bounds of the section header data when a section of type SHT_NULL or SHT_NOBITS is encountered, potentially leaking kernel memory contents. The weakness is classified as CWE‑125.

All Linux kernel builds that contain the unpatched elf_validity_cache implementation are potentially vulnerable. While the specific release dates are not listed, the function was modified in the 2026 kernel series; thus any kernel revision from before that change should be considered at risk.

The CVSS score is 4.7 and the EPSS score is <1%, which together indicate a low overall risk level. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is inferred: an attacker would need to load a malicious ELF module, which normally requires elevated or privileged access. Therefore, unless an adversary can obtain administrative rights, exploitation is probably confined to local or privileged contexts and is considered unlikely in most deployments.