The flaw occurs in the kexec_load system call when file_mode is zero. A user space buffer containing the command line is incorrectly cast to a kernel pointer and passed to strncmp without performing a proper copy_from_user. This type confusion allows the kernel to read data from an arbitrary user space address and can cause an illegal read or a crash. The weakness corresponds to the Common Weakness Enumeration 687.

Any LoongArch Linux kernel that has not yet integrated the commit that inserts copy_from_user before the strncmp. The CNA vendor products are Linux kernel for LoongArch architecture; no version ranges are supplied; consequently any build containing the vulnerable code path is potentially affected.

The embedded EPSS score is below 1 %, implying a low probability of exploitation in the wild and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires an attacker to invoke the kexec_load system call with a malicious payload that includes a segment whose marker matches the kexec string. Because the kernel validates the user buffer incorrectly, the exploit can lead to a kernel crash or memory read, delivering a denial of service. The absence of a KEV listing and the low EPSS score suggest that the vulnerability is not actively targeted. The CVSS score of 5.5 indicates a moderate severity level.