The Linux kernel’s KVM arm64 implementation includes an accounting flaw in which protected guest faults incorrectly charge long‑term pins to the VM’s memory mapping during teardown. Because this teardown can execute later when the current process’s memory mapping is unrelated, the pin charge is applied to the wrong memory region. The patch corrects this by dropping the charge from the KVM memory mapper instead of the potentially mismatched context.

All Linux kernel releases that incorporate the arm64 KVM code may be affected. No specific version range is provided, so any kernel containing this code path could be vulnerable.

The CVSS score is 5.5 and the EPSS score is < 1%, indicating moderate severity but low exploitation probability. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a privileged guest or compromised virtual machine that can trigger the teardown logic. Until the patch is applied, the risk remains uncertain.