The Linux kernel flaw involves the perf subsystem’s addr_filter_ranges structure, which was allocated but never freed under RCU. This improper cleanup can cause a memory leak, making the kernel consume increasing memory over time until it may become unstable or crash. The vulnerability is identified as a failure to properly release resources.

Vulnerable kernels are those that lack the RCU free fix for the perf addr_filter_ranges structure. The fix was introduced in commit 6f1853b2b9f38f1343790bae8c0601b3f7554754; any kernel not incorporating this change is affected. The issue applies to all Linux kernel versions that include the perf subsystem and use the legacy addr_filter_ranges implementation.

The CVSS score of 7.8 indicates a high severity, and the EPSS score of < 1% shows a very low probability of exploitation. The flaw is not listed in CISA KEV. The issue requires interaction with the perf subsystem; therefore, based on the description, it is inferred that an attacker would need permission to create perf events, which typically requires elevated privileges on the host. No specific exploit has been reported, but the uncontrolled memory usage could lead to a cumulative denial of service if repeated use occurs.