A logic flaw in the Linux kernel's BPF compiler causes the system to incorrectly rewrite specific instruction sequences when a jump is involved. The buggy behavior allows the rewrite function to produce an unsound BPF program that may execute unintended instructions. If an attacker can supply a crafted BPF program that triggers this rewrite, they can potentially manipulate kernel execution flow, leading to code execution or denial of service.

The vulnerability exists in all Linux kernel builds that contain the faulty BPF fastcall rewrite logic before the cited commit. It affects the Linux kernel itself, regardless of distribution, and therefore all systems running an unpatched kernel version are susceptible.

The CVSS score is not listed and the EPSS score is not available. Because the flaw is localized to the BPF compiler and requires a malicious BPF program, exploitation is non‑obvious and likely limited to privileged or kernel‑deployed contexts. The absence from the KEV catalog implies no known large‑scale exploitation. Still, the integrity impact warrants prompt remediation.