A flaw in the Linux kernel’s KVM memory handling incorrectly clears the XN (execute never) flag for certain pages when the FEAT_XNX feature is not enabled. The bug causes the kernel to unconditionally grant execute permissions to memory that should be non‑executable, effectively allowing any process that can target that memory region to run code that was intended to be protected.

The issue is limited to Linux kernel implementations that use KVM with arm64 architecture. Any host system running a kernel version containing the flawed code and configured without FEAT_XNX enables the vulnerability.

No EPSS value is provided and the vulnerability is not listed in CISA KEV, so public exploitation data is not available. The defect could be leveraged by an attacker with the ability to influence KVM memory mapping, allowing execution of arbitrary code within a guest or host context. The absence of an official CVSS score makes it difficult to quantitatively rate severity, but the nature of the flaw suggests a high potential impact if exploited.