The vulnerability is a logic flaw in the PowerPC entry code of the Linux kernel where replaying an interrupt unconditionally overwrites the irq_soft_mask register, stripping the PMI bit and leaving the kernel in an inconsistent mask state. The corrupted mask leads to a warning during normal boot operations and can potentially trigger kernel instability or a crash. This flaw falls under CWE-617.

All builds of the Linux kernel that run on PowerPC processors (both 32‑bit and 64‑bit) and that have not yet incorporated the patch are affected. The bug manifests in the entry path and is triggered during interrupt replay, which can occur early in boot or on demand for timer interrupts. No specific version numbers are given, but any kernel before the commit 63a7531ca31f… that fixes the mask use is vulnerable.

The CVSS score for this issue is 5.5, indicating moderate severity. Its EPSS score is less than 1%, implying a very low probability of exploitation. The issue is not listed in the CISA KEV catalog, so no mass exploitation has been observed. Exploitation would require local kernel‑level access to trigger a replayed interrupt, such as during system boot or via firmware that initiates a synthetic interrupt. Given the low EPSS, the risk to most systems is modest, but if an attacker can execute code with kernel privileges, the corrupted interrupt mask can cause a crash or denial of service. No remote attack vector is publicly described, and the failure manifests as a kernel warning or instability rather than direct information disclosure or arbitrary code execution.