The Linux kernel PSP netlink implementation exposes a flaw where the dev-set and key-rotate operations let an attacker modify PSP device configuration and cryptographic key material without needing CAP_NET_ADMIN privileges. The only check performed is that the caller shares the same network namespace, meaning any local process within the namespace can execute these commands. This lack of proper privilege checks permits a local privilege escalation that may lead to exposure of sensitive cryptographic material or disruption of PSP operation.

All Linux kernel releases containing the PSP netlink code are potentially affected. Specific version ranges are not listed in the advisory, so any kernel that includes the PSP device driver is susceptible if unpatched.

With a CVSS score of 5.5 the vulnerability is considered medium severity. The EPSS score is reported as less than 1%, indicating a low probability of exploitation in the wild. The attack vector is local: a running process sharing the target network namespace can issue the dev-set or key-rotate netlink messages. No active exploitation campaigns have been reported and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.