The flaw is due to the Linux kernel failing to call pagetable_dtor() when freeing hot‑plugged page tables on ARM64, leaving the page_type set to PGTY_table and corrupting page statistics. This results in a “Bad page state” warning when the page is freed and can leak PT‑lock table allocations, potentially causing kernel panics or denial of service. The weakness is identified as CWE‑459, describing improper deallocation of resources.

The vulnerability affects ARM64 builds of the Linux kernel running versions prior to 6.17 with the DEBUG_VM debugging feature enabled. Any system performing hot‑plug memory operations on these kernels is impacted, although the effect is limited to kernel memory management and does not directly impact user‑space data or privileges.

The missing destructor leads to inconsistent page state within the kernel's memory‑management subsystem, potentially causing a system crash or denial of service. The EPSS score is less than 1% and the vulnerability is not listed in the CISA KEV catalog, indicating a very low but non‑zero likelihood of exploitation. From the description it is inferred that an attacker would need local privileged access to trigger the hot‑plug path; the exact privilege level is not explicitly stated but is implied to require kernel or root level. Attackers could force a bad page state warning and potentially a kernel panic by initiating a hot‑plug memory removal while DEBUG_VM is enabled.