An integer overflow in the Android kernel function __pkvm_host_share_guest can cause an out‑of‑bounds memory write, directly compromising kernel integrity. Based on the description, it is inferred that the attack can be performed locally by an unprivileged user, allowing elevation to superuser status without needing additional execution rights or user interaction. This vulnerability is a classic example of integer overflow leading to an out‑of‑bounds write, categorized as CWE‑190.

Google Android devices that run kernel versions affected by the integer overflow bug are vulnerable. No explicit release or build numbers are listed in the available data; therefore, it is inferred that all Android kernel releases preceding the confirmed patch are potentially at risk. Device owners should verify their kernel version against the vendor's security update to confirm exposure.

The CVSS score of 8.4 classifies this issue as high severity, indicating a significant potential impact. The EPSS value of less than 1 % suggests that public exploitation likelihood is low at present, and the vulnerability is not listed in CISA’s KEV catalog. Nevertheless, the lack of user interaction requirements means that any local attacker can exploit the flaw, making it a critical concern for environments where untrusted code could run in user space or where elevation from user‑level to kernel‑level is possible.