Impact
The vulnerability causes the ARM Linux kernel to perform a word load from the KASAN shadow area while switching contexts, a CWE‑468 unaligned memory access flaw. On ARMv5 CPUs, unaligned word loads fault, leading to an alignment exception that crashes the system before it. It is inferred that this flaw results in a kernel crash and interrupts system start‑up, but no remote code execution or data leakage is reported.
Affected Systems
The flaw affects the Linux kernel for ARM architectures that have CONFIG_KASAN_VMALLOC and CONFIG_VMAP_STACK enabled. The vulnerability was introduced by commit 44e9a3bb76e5, and no specific kernel version range is given; it is inferred that any kernel incorporating that commit or older may be susceptible. Specific kernel version information is not provided, so affected versions cannot be precisely identified beyond those including the vulnerable commit.
Risk and Exploitability
Based on the description, it is inferred that the attack vector is local and requires an attacker to influence the boot process or load a module so that the context switch triggers the fault. The CVSS score of 5.5 indicates moderate severity, while the EPSS score of < 1% shows a very low exploitation probability. The vulnerability is not listed in CISA KEV, so widespread exploitation is unlikely. Nonetheless, the flaw is a local denial‐of‐service vulnerability that can partition or halt the affected system before normal operation.
OpenCVE Enrichment
Debian DLA