The vulnerability originates in the Linux kernel KVM ARM64 implementation, where the VNCR page is not correctly re‑translated after a guest abort for a write. This oversight can cause the kernel to fault on the second write, potentially leading to a host crash or loss of service. The weakness is tied to improper handling of memory translation and TLB invalidation, which may allow a malicious guest to trigger a kernel fault through crafted abort sequences.

All Linux kernel versions that use the KVM ARM64 VM‑ops and the VNCR mechanism are affected. The problem is reported in the kernel source and applies to any system running a Linux kernel that hosts virtual machines on ARM64 hardware.

The CVSS score is not publicly documented, and the EPSS score for this vulnerability is not available. It is not listed in the CISA KEV catalog, indicating no confirmed widespread exploitation. However, attackers who can run code inside a guest VM could exploit the flaw by provoking a write abort on the VNCR, which may result in a kernel fault and denial of service on the host. The likely attack vector is a malicious guest VM performing a sequence of reads and writes that exercise the VNCR page in a way that triggers the faulty re‑translation logic.