The patch addresses a flaw in the Linux kernel’s tracing subsystem where a histogram trigger that references the same variable three or more times fails to properly decrement its reference count. When the trigger is removed, variable references and their associated strings remain allocated, causing memory exhaustion and leaking sensitive data. The vulnerability is a reference‑counting bug that can lead to uncontrolled memory growth and accidental disclosure of kernel memory contents. Based on the description, the likely attack vector is a privileged process that creates and removes tracing histogram triggers; it is not a remote code execution flaw, but it can impair system stability or leak information in a local or device‑owner context.

This issue impacts all Linux kernel releases that include the old histogram implementation before commit 8bcebc77e85f and 656fe2ba85e8 were merged. The exact affected version numbers are not specified, but any kernel that has not been updated to incorporate these patches is susceptible.

Because the exploitation requires manipulation of internal tracing APIs and is limited to users with sufficient kernel privileges, the likelihood of widespread exploitation is low. The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, indicating that there are no known widespread exploitation or active use cases. Nonetheless, the unchanged reference count can cause a gradual memory leak that may eventually lead to system instability or denial of service in environments with heavy tracing usage. The vulnerability’s severity is quantified by a CVSS score of 5.5, so risk assessment should be based on the described impact and local privilege requirements.