The flaw originates when the final portion of a memory segment can extend beyond its allocated page and overlap the next page reserved for the early kernel stack. This misalignment allows overwriting page table entries that control memory mappings, potentially leading to a kernel crash or unpredictable system behavior. The bug is an out-of-bounds write and also involves an incorrect calculation of buffer size (CWE-131) and may also be considered an uncontrolled recursion scenario (CWE-674). The description indicates a risk of system instability, which in the worst case can result in a denial of service. No explicit privilege escalation or data disclosure is reported in the provided details.

The vulnerability affects Linux kernels running on ARM64 architectures. Any kernel prior to the commit that reserves an extra page for early mapping may be susceptible, regardless of the distribution or firmware version. Specific affected releases are not enumerated, so all kernels compiled with early initialization mapping before the patch should be considered at risk.

The CVSS score is 5.5, indicating a moderate severity. The EPSS score is <1%, indicating a very low likelihood of exploitation. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog. No active exploitation has been documented. The flaw involves kernel memory, implying a local attack vector. Based on these metrics the overall risk remains low, primarily associated with accidental crashes in development or testing, not a serious security breach.