The vulnerability allows modification of PSP device configuration and cryptographic keys through the dev-set and key-rotate netlink operations without requiring CAP_NET_ADMIN. Because the only check performed is that the caller shares the same network namespace, any local process within that namespace can alter device state and key material, potentially exposing sensitive information or disrupting network operations. This lack of proper privilege checks constitutes a local privilege escalation opportunity.

All Linux kernel versions that ship the PSP netlink implementation. The vulnerability affects the Linux kernel as a whole; specific upstream kernel versions are not listed in the advisory.

The CVSS score is not provided and EPSS is unavailable, but the vulnerability is not flagged in the CISA KEV catalog. It is exploitable locally by any process with access to the same network namespace, which is a common scenario for privileged daemons and containerized workloads. The absence of a required admin capability makes the exploitation straightforward for a local attacker, resulting in a high per‑process impact but limited to the affected namespace. The overall risk to a system depends on how many critical services share the namespace.