The Linux kernel flaw occurs in the map_kptr_match_type function where the MEM_PERCPU flag is not required on the source register when storing into a percpu-kptr map. This omission allows a BPF program to place a standard kernel pointer into a percpu-kptr field, causing the kernel to treat it as a per-CPU object. The result is uncontrolled kernel memory read or write operations, giving an attacker the ability to alter kernel data or execute code with elevated privileges. The weakness is a type safety bug, classified as CWE-843.

Linux kernel builds that support BPF and percpu-kptr maps are affected. No specific version range is listed in the advisory, so it is inferred that all kernel releases prior to the applied fix may be vulnerable until the patch is installed. The impact applies to any distribution using the affected kernel, regardless of the vendor.

The CVSS score is 7.0, indicating a high severity. The EPSS score is below 1%, implying a very low but non‑zero exploitation likelihood. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the most probable attack vector is local, requiring the ability to load BPF programs with sufficient privileges. Once a BPF program stores a plain allocation pointer into the percpu-kptr map, the kernel’s subsequent handling can be leveraged to perform arbitrary memory operations.