A guest operating system can exploit a flaw in the KVM x86 emulator by executing a memory store that crosses a page boundary and arrives at an io‑eventfd with data‑match enabled. The kernel code incorrectly assumes a 32‑byte alignment and triggers a BUG_ON() when the second fragment is not aligned to the length of the operation. The resulting kernel panic brings the entire host to a halt, effectively denying service to all virtual machines and potentially impacting other system processes that depend on the host kernel. The issue is classified as CWE‑617.

The vulnerability exists in the Linux kernel’s KVM module for x86 architectures. Any Linux distribution shipping a kernel that contains the legacy BUG_ON() construct in the KVM ioeventfd logic is affected. No specific version string is supplied in the advisory, meaning that every kernel in which the old code path appears is potentially vulnerable until the patch that replaces the BUG_ON() with get_unaligned() is applied.

The CVSS score of 7.1 indicates a high‑impact lack of availability for the host system. The EPSS score of less than 1% suggests the exploit is currently rare or unobserved in the wild. The vulnerability is not listed in CISA’s KEV catalog, further implying no documented exploitation yet. A malicious guest with the ability to craft misaligned store operations can trigger the bug; the attack requires internal VM control and knowledge of the KVM memory handling, making it more complex than a typical user‑space flaw but still a credible threat if the host is exposed to untrusted guests.