A divide–by–zero error occurs in the Linux kernel’s btf_struct_walk internal helper when a struct contains a flexible array and the code attempts to compute an offset without checking the size of the element type. The bug triggers a kernel panic during BPF program load time, destroying system stability without revealing sensitive data. The failure is caused by an unchecked modulo operation against a zero-sized type, demonstrating a classic Integer Division or Modulo by Zero vulnerability.

The flaw exists in the Linux kernel, affecting all variants that expose BPF and BTF functionality. Users of any Linux distribution running a kernel that has not yet incorporated the fix are susceptible. The bug was identified in the core kernel source and applies broadly across releases prior to the patch commit.

Exploitation requires the ability to load a BPF program containing a struct with an empty flexible array—an action generally restricted to users with administrative privileges or the CAP_SYS_ADMIN capability. No publicly available exploit is documented, and the bug is not listed in CISA’s KEV catalog. Because the EPSS score is not available and no known exploits exist, the likelihood of real‑world exploitation is low, but the impact is high if an attacker can load such a program and cause a kernel panic, potentially leading to a denial of service for the target system.