The flaw arises when a kernel‑allocated pseudo dentry, normally freed immediately, is made the root of a mount via a bind operation on /proc/self/fd/<fd>. This can lead to a use‑after‑free condition that corrupts kernel memory, creating a vulnerability that can be leveraged to execute arbitrary code with kernel privileges. The impact is thus privilege escalation or remote code execution at the kernel level. Based on the description, it is inferred that an attacker would need local privilege to perform the bind mount; no network interaction is required for exploitation.

The affected component is the Linux kernel itself. Because the advisory does not list a version range, any system running a kernel that has not incorporated the described patch could be vulnerable. All Linux distributions that ship the kernel are potentially impacted unless the fix has been back‑ported in a later release. No specific distribution or kernel version is named in the CVE data.

The CVSS score of 7.8 quantifies a high severity, while the EPSS score of less than 1% indicates a low current exploitation probability. The CVE is not listed in the CISA KEV catalogue. Based on the description, the likely attack vector is a local privileged bind mount on a pseudo dentry, so network interaction is not required. Attack requires a privileged process capable of performing the bind mount; this path is inferred from the exploit description.