Impact
The vulnerability occurs during memory compaction on Alpha processors in the Linux kernel. Insufficient TLB shootdown during page migration allows stale data or instruction translations to remain after page movement, leading to heap corruption and user‑space crashes such as SIGSEGV, glibc allocator failures, and compiler internal faults. The weakness involves a missing TLB shootdown issue (CWE‑821) and a memory corruption flaw that can lead to out‑of‑bounds writes (CWE‑787). The likely attack vector is triggering memory compaction, which may be initiated by the operating system or by an attacker via memory usage patterns.
Affected Systems
All Linux kernels running on Alpha hardware that predate the commit adding a migration‑specific helper for TLB invalidation are affected. This includes both single‑processor (UP) and multi‑processor (SMP) configurations; no specific release numbers are provided, so any version compiled from source before the fix is at risk.
Risk and Exploitability
The EPSS score is below 1% and the vulnerability is not listed in the CISA KEV catalog, indicating a very low likelihood of public exploitation. Triggering memory compaction, which can occur automatically or via memory usage patterns, is a plausible attack vector. The impact is limited to application termination and potential memory corruption; there is no evidence supporting privilege escalation or arbitrary code execution. The risk remains until the kernel is updated or compaction is disabled. The CVSS score is 7.8, categorizing this vulnerability as high severity.
OpenCVE Enrichment