The vulnerability arises from the Linux kernel freeing a BPF trampoline program after a partial RCU grace period that does not cover preempted tasks. This premature deallocation leads to a use‑after‑free that manifests as an out‑of‑bounds read error reported by KASAN. The flaw can cause a kernel crash if an attacker is able to load eBPF programs that trigger the fault.

All Linux kernel builds are potentially impacted, as the defect exists in the kernel tree prior to the commit referenced in the advisory. No specific version numbers are listed, so any kernel version older than the patch adding a full RCU grace period before freeing trampoline programs should be considered vulnerable.

The CVSS score for this vulnerability is 4.7, and the EPSS score is less than 1%, indicating a low likelihood of exploitation. The flaw involves use‑after‑free and an out‑of‑bounds read, which can lead to a kernel crash if exploited. No active exploits are known, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector is inferred to be local or privileged execution that can load eBPF programs.