An uninitialized function pointer caused by the absence of a "show" operation for the void BTF type leads to a null‑pointer dereference in the kernel’s BPF type display code. This can trigger a kernel panic or crash when a BPF program references a "const void" type, potentially destabilising the entire system. The flaw is a classic dereference‑of‑null‑pointer error that may also expose internal kernel structures through KASAN output.

All Linux kernels that contain the older bpf/btf.c implementation and lack the recent patch are considered vulnerable; the affected vendor list includes Linux, and no specific version range was provided, so any build prior to the commit must be treated as at risk.

The vulnerability permits an attacker in charge of loading BPF programs (CAP_BPF) to trigger a kernel crash, resulting in a denial of service. The CVSS score of 5.5 indicates moderate severity, and the EPSS score of <1% suggests a low probability of exploitation in the wild. While the flaw is not listed in the CISA KEV catalog, its potential to cause a kernel panic represents a significant risk. Exploitation requires user‑level BPF support; no direct privilege escalation is implied by the current description.