The flaw in the ARM64 TLB handling causes stale PMD page table entries to remain in the walk cache after the tables are unshared. These outdated entries may be used in subsequent page table walks, which can lead to incorrect memory translations, memory corruption, or privilege escalation. The bug originates from an improper check that omitted the unshared_tables flag, resulting in a full walk cache invalidation not being performed when necessary.

All Linux kernel releases that run on ARM64 whose kernel configuration does not include the fix applying TLBF_NONE for unshared PMD tables are affected. The vendor/product list is Linux:Linux, and the CPE indicates all Linux kernels. No specific kernel version range appears in the CNA data, so any pre‑patch arm64 kernel is potentially vulnerable.

The CVSS score of 7.8 denotes high severity, while the EPSS score of less than 1% indicates a low probability of exploitation at this time. It is not listed in the CISA KEV catalog. An attack would require triggering a PMD unshare operation, which normally can only be performed by privileged kernel code, making the threat mainly relevant to local or already‑compromised users. The potential for memory corruption or privilege escalation justifies a prompt patch, but the low exploitation likelihood tempers the urgency compared to higher‑risk vulnerabilities.