The vulnerability stems from the Linux kernel incorrectly allocating page frame numbers within a region owned by the Gunyah hypervisor on Qualcomm Monaco devices. Because the firmware’s EFI memory map reserves only a portion of the 512 KiB hypervisor‑owned area, the kernel may hand out addresses in the remaining unreserved part. Accessing these addresses triggers synchronous external abort exceptions, leading to kernel crashes and a local denial of service. The weakness type is CWE-908.

Linux kernel running on Qualcomm Snapdragon Monaco platforms (ARM64). The issue applies to any kernel version prior to the commit that adds a full Gunyah metadata reserve; no specific version list is supplied.

This flaw constitutes a local denial‑of‑service vulnerability; it does not provide a direct code‑execution path. An attacker with local or low‑privilege access could repeatedly trigger the allocator to allocate PFNs in the misreported region, causing repeated kernel crashes. The CVSS score of 7.5 indicates a high severity, and the EPSS score of < 1% suggests a very low likelihood of exploitation. It is not listed in the CISA KEV catalog, so risk assessment relies on the impact of kernel instability and the ease of triggering it through normal system activity.