The vulnerability is a Rust the -Cforce‑unwind‑tables flag to module unannotated. When Linux kernel is built with this flag and the CONFIG_UNWIND_PATCH_PAC_INTO_SCS configuration option is enabled, the SCS boot patching routine attempts to patch Rust‑generated constructors with a paciasp instruction while leaving the autiasp instruction unchanged. the constructor’s DWARF information, resulting in a global‑out‑of‑bounds read that manifests as a kernel panic during early boot. The likely attack vector is a buggy compiler build; an attacker must provide or compile the kernel with the problematic flag, making this a denial‑of‑service vulnerability that prevents normal booting.

Any Linux kernel compiled for arm64 that incorporates Rust modules with the -Cforce‑unwind‑tables flag and has CONFIG_UNWIND_PATCH_PAC_INTO_SCS enabled is impacted. The CVE does not list specific kernel releases, and the issue is tied to build configuration rather than a particular kernel version.

The EPSS score of <1% indicates a very not listed in CISA KEV. The flaw does not provide a runtime attack vector; it requires a buggy compiler build. Impact is significant only for systems built with the vulnerable compiler, as the kernel crashes during initialization, preventing normal operation. Overall risk to existing kernel deployments built with a patched compiler is low.