The Linux kernel bug allows a BPF program that loads a reference to the main function to bypass the JIT rewrite that normally substitutes the real address. Because the address is never finalized when subprogram_cnt is 1, the program can cause a call to an invalid or attacker‑supplied address, resulting in a kernel‑level arbitrary code execution. The flaw stems from an unchecked indirect function pointer and can compromise confidentiality, integrity, and availability of the entire system.

Affected systems are Linux kernel distributions that have not yet incorporated the patch, including all mainstream vendors that ship the current kernel revision. No specific product versions are listed, indicating that all current releases before the changelog commit are vulnerable.

The CVSS score is not provided, but the vulnerability is high‑risk because it permits arbitrary code execution in kernel context. EPSS is not available, and the issue is not currently in CISA KEV. Attackers would need to supply a BPF program from user space; the likely vector is running malicious BPF bytecode from privileged processes or via kernel module interfaces. Because size of the patch commit is small, the fix is straightforward, but until the kernel is updated, the risk remains high.