Impact
A logic bug in the Linux kernel's powerpc/uaccess code causes mask_user_address() to check the wrong configuration symbol, CONFIG_E500 instead of the intended CONFIG_PPC_E500. As a result, the optimized address-masking routine mask_user_address_isel() is skipped on E500 hardware. This incorrect masking can allow user-space code to reference memory addresses that should be protected, potentially leading to kernel memory corruption and elevation of privilege. The weakness aligns with a protection‑mechanism failure profile (CWE‑693).
Affected Systems
All Linux kernel builds that run on PowerPC E500 processors and compile with the buggy configuration are affected. The specific kernel versions are not enumerated, but any release that contains the faulty configuration check is impacted until the patch is applied by the vendor.
Risk and Exploitability
No CVSS or EPSS score is publicly available, and the vulnerability is not listed in the CISA KEV catalog. The lack of quantitative metrics means the exact severity is unclear, but the described flaw permits a local kernel code execution path that could be leveraged for privilege escalation. Exploitation likely requires root or the ability to execute code in the kernel context, and no public exploit has been reported at this time.
OpenCVE Enrichment