The vulnerability arises from the Linux kernel’s persistent ring buffer validation logic, which failed to verify that the stored number of sub‑buffers (nr_subbufs) matched the expected value derived from the number of pages. This oversight can allow an attacker to manipulate ring buffer metadata such that the kernel operates on inconsistent data, possibly leading to memory corruption or other integrity violations.

All Linux kernel releases that did not adopt the recent patch removing the inconsistency between nr_subbufs and nr_pages. In particular the change referenced in the CVE description has been merged into the mainline kernel; any running kernel prior to that commit is considered vulnerable.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of < 1% suggests low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Due to the requirement for kernel‑level manipulation and the lack of publicly available exploits, the risk is considered moderate to low in typical environments. However, in environments where untrusted code can influence kernel data structures, the potential for privilege escalation or system instability should be evaluated.