The vulnerability arises when a tracing command that creates field variable histograms fails. The kernel registers histogram triggers for those variables but does not unregister them on error, leaving active trigger objects. These untracked resources accumulate, potentially exhausting kernel memory or degrading system performance. The flaw does not provide immediate remote code execution, but the resulting memory leak can effectively cause a denial of service.

The flaw exists in the Linux kernel tracing subsystem and is represented in the Common Platform Enumeration cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*. The impact applies to any Linux distribution that uses the kernel’s event‑tracing framework; no explicit kernel version list is provided, so the vulnerability may persist in all current kernels until the patch is applied.

Based on the description, it is inferred that the attack vector is local and requires an attacker with privileged or kernel‑level access to execute custom tracing commands that trigger the fault. The CVSS score is not provided in the data, and the EPSS score is unavailable, indicating no known exploitation trend. The vulnerability is not listed in the CISA KEV catalog. The lack of a public exploit, combined with the need for elevated privileges, suggests a moderate risk, but because the flaw can lead to resource exhaustion, it remains a potentially high‑impact issue for affected systems.