The vulnerability resides in the Linux kernel’s handling of huge page write‑protected entries via userfaultfd. A missing guard in the function that sets the write‑protect flag can cause the kernel to lose hardware‑generated Dirty or Accessed bits by committing a stale page‑table snapshot after that bit has changed. This race condition could lead to inconsistent page tracking, potentially corrupting memory state and affecting correctness of programs that rely on accurate huge page metadata. While no definitive exploitation path is documented, local privileged code that manipulates userfaultfd protection on huge pages could leverage the race to create subtle memory inconsistencies.

All Linux kernel-based systems that have not yet incorporated the six patches mentioned in the patch series are affected. The advisory does not list specific version strings, but the code paths patched are present in kernels of the 5.x series and later, so any 5.x or newer kernel lacking these updates is at risk.

The CVSS score is not provided and EPSS is unavailable, and the vulnerability is not listed in the CISA KEV catalog. Consequently, the likelihood of exploitation in the wild is uncertain, but the presence of a kernel race that can corrupt page metadata elevates the risk to moderate or high for workloads that use huge pages and userfaultfd. Successful exploitation would require local or privileged access to trigger the race conditions described.