The Linux kernel mistakenly tied the lifetime of scheduling statistics to the memory‑mapping structure (mm). When a task switches its mm on one CPU, another CPU could concurrently call account_mm_sched and read the now‑freed mm, resulting in a use‑after‑free condition. The patch separates the scheduling statistics into a refcounted sched_cache_group object, removing the dependency on mm and preventing the unsafe access.

Any Linux kernel build that embeds sched_cache_stat inside the mm_struct before the decoupling patch is potentially affected. The advisory does not list specific kernel version ranges, so kernels lacking the sched_cache_group change are considered vulnerable.

The CVSS score of 7.8 marks the issue as high severity, while the EPSS score of < 1% indicates a low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, suggesting no known public exploits. Based on the description, exploitation would require a process that can race memory‑mapping changes across CPUs; the attack vector is most likely local and relies on race timing. No evidence in the CVE data indicates remote exploitation or privilege escalation capabilities beyond the local context.