The vulnerability originates from the Linux kernel’s tracing histogram feature, where the histogram stacktrace modifier can cause an unbounded memory copy. During parsing, the code incorrectly interprets the field name, selects an incorrect stacktrace field, and copies an arbitrary number of entries directly into a fixed‑size array. This overrun can lead to out‑bounds memory writes and kernel crashes, exposing the system to potential denial of service.

The flaw affects the Linux kernel on any distribution that implements the tracing histogram mechanism without the patch referenced in the provided commits. Specific kernel versions are not enumerated; the issue applies to all kernels that have not incorporated the fix.

The Exploit Prediction Scoring System value is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating limited public exploitation data. The attack vector is inferred to be local: an attacker must be able to write to tracing event trigger files such as /sys/kernel/tracing/events/<event>/trigger. Once the trigger is written with a .stacktrace modifier, the kernel will execute the vulnerable code, potentially causing memory corruption and a crash. Given the local nature of the attack and the requirement for write access to the tracing subsystem, the overall risk remains low to moderate but should be mitigated through patching.