The flaw exists in the Linux kernel's crypto subsystem, specifically within the af_alg_pull_tsgl function. When page reassignment was added, the existing loop was not updated, causing the code to attempt to reassign one page more than necessary. This can overwrite kernel memory beyond the intended bounds, potentially corrupting critical data structures or enabling an attacker to execute arbitrary code at kernel privilege.

Any Linux kernel build that includes the af_alg interface and does not contain the committed patch is affected. The CNA does not list specific vulnerable or fixed version ranges, so users should check whether their kernel version implements the official fix for af_alg_pull_tsgl.

The EPSS score of < 1% indicates a very low probability of public exploitation, and the vulnerability is not present in the CISA KEV catalog. However, the CVSS score of 7.8 highlights a high severity level. The attack vector likely requires the ability to trigger af_alg operations, such as by running malicious cryptographic code or manipulating data processed by af_alg. If successfully exploited, the kernel memory corruption could lead to privilege escalation or a denial‑of‑service outage. While exploitation is currently unlikely, the potential impact remains significant.