Impact
The flaw originates when the final portion of a memory segment can extend beyond its allocated page and overlap the next page reserved for the early kernel stack. This misalignment allows overwriting page table entries that control memory mappings, potentially leading to a kernel crash or unpredictable system behavior. This is an out-of-bounds write (CWE-787). The description indicates a risk of system instability, which in the worst case can result in a denial of service. No explicit privilege escalation or data disclosure is reported in the provided details.
Affected Systems
The vulnerability affects Linux kernels running on ARM64 architectures. Any kernel prior to the commit that reserves an extra page for early mapping may be susceptible, regardless of the distribution or firmware version. Specific affected releases are not enumerated, so all kernels compiled with early initialization mapping before the patch should be considered at risk.
Risk and Exploitability
CVSS, EPSS, and KEV metrics are not disclosed, and the vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog. Based on the description, it is inferred that no active exploitation is documented. The description indicates the flaw involves kernel memory, implying that the attack vector is local rather than remote. Based on the information, it is inferred that the overall risk is low to moderate, primarily stemming from accidental crashes in development or testing environments rather than from a serious security breach.
OpenCVE Enrichment