The vulnerability arises from the Linux kernel’s persistent ring buffer validation logic, which failed to verify that the stored number of sub‑buffers (nr_subbufs) matched the expected value derived from the number of pages. This oversight can allow an attacker to manipulate ring buffer metadata such that the kernel operates on inconsistent data, possibly leading to memory corruption or other integrity violations. The likely attack vector is a local user with the ability to influence the ring buffer structure, resulting in kernel‑level compromise or denial of service.

All Linux kernel releases that did not adopt the recent patch removing the inconsistency between nr_subbufs and nr_pages. In particular the change referenced in the CVE description has been merged into the mainline kernel; any running kernel prior to that commit is considered vulnerable.

The CVSS score is not provided, and the EPSS score is unavailable, indicating no known widespread exploitation data. The vulnerability is listed as not being part of the CISA KEV catalog. Due to the requirement for kernel‑level manipulation and the lack of publicly available exploits, the risk is considered moderate to low in typical environments. However, in environments where untrusted code can influence kernel data structures, the potential for privilege escalation or system instability should be evaluated.