In the Linux kernel, a flaw in the BPF verifier incorrectly downgrades a scalar zero spill that is not fully dead to a STACK_ZERO value. This logical error can break precision propagation chains and may cause the verifier to incorrectly accept otherwise invalid eBPF programs. The description does not explicitly state that privilege escalation is possible, but a malformed BPF program that bypasses verification could potentially execute malicious code in the kernel context. This potential impact is inferred and not directly confirmed.

All Linux kernel releases that have not incorporated the patch note outlined in the references are affected. The vendors listed are Linux:Linux, and the product impacted is the Linux kernel. No specific version range is supplied; therefore, any kernel version that has not yet applied the fix is considered vulnerable.

The CVSS score is not provided, but the flaw resides in core kernel verification logic, implying a high severity potential for local users capable of loading eBPF programs. The EPSS score is not available, indicating limited publicly known exploitation, and the CVE is not listed in CISA KEV. Exploitation would require crafting a tailored BPF program and is inferred to be possible in environments permitting unrestricted BPF loading. Attack likelihood is uncertain but could be moderate to high in such environments.