The bug occurs in the ACPI subsystem’s object‑copy routine, which allows an attacker to inject invalid references into local, argument, and debug objects during copying. This can corrupt kernel memory and may permit privilege escalation or cause a kernel panic, depending on how the corrupted reference is subsequently used.

All Linux kernel distributions that contain the unpatched acpi_ut_copy_simple_object function are affected. The vulnerability is present in the generic kernel source, with no specific version limits listed, meaning any recent kernel without the applied fix is vulnerable.

The CVSS score of 8.4 signals high severity, and the EPSS score is currently unavailable. It is not listed in the CISA KEV catalog. The likely attack vector is local, leveraging the ACPI subsystem or specially crafted ACPI tables, and an attacker with such capability could trigger the memory corruption to gain elevated privileges or cause denial of service.