An uninitialized function pointer caused by the absence of a "show" operation for the void BTF type leads to a null‑pointer dereference in the kernel’s BPF type display code. This can trigger a kernel panic or crash when a BPF program references a "const void" type, potentially destabilising the entire system. The flaw is a classic dereference-of-null-pointer error that may also expose internal kernel structures through KASAN output.

All Linux kernels that contain the old bpf/btf.c implementation and lack the recent patch are affected. The CVE summary lists Linux:Linux as impacted vendors; no specific version range is provided, so any kernel build before the fix must be considered vulnerable.

The vulnerability allows an attacker with the ability to load BPF programs (CAP_BPF) to trigger a kernel panic, resulting in a denial of service. While the EPSS score is not available and the vulnerability is not listed in CISA KEV, the inherent risk of a kernel crash is significant. Exploitability requires user‑level BPF support; no privilege escalation is directly implied by the current description.