The vulnerability occurs when the Linux kernel for PowerPC restores the Kernel User Address Protection (KUAP) flag too early during the transition to user mode in the arch_exit_to_user_mode_prepare() hook. This early restoration allows privileged kernel code to access user memory after an exception or system call has been handled, bypassing the intended boundary protection. The weakness can lead to unauthorized reading or modification of user‑space data, effectively providing a privilege escalation or data integrity compromise path for an attacker with kernel or local privileged execution.

This flaw affects the Linux kernel on PowerPC architectures. The issue has been present in builds where the early KUAP restoration occurs in arch_exit_to_user_mode_prepare(), before the expected high‑level exit hooks such as interrupt_exit_user_prepare() or syscall_exit_prepare(). No specific kernel patch level is listed, but the commit c8e80c19c3b9c8db83a14fab00445a6064992442 resolves the issue. The affected product is the Linux kernel itself, so all distributions using PowerPC kernels are potentially impacted until the kernel is patched.

The CVSS score is 5.5, indicating moderate impact. The EPSS score is less than 1%, showing a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local privileged: the flaw requires kernel control to trigger an exception or system call that invokes arch_exit_to_user_mode_prepare(), so an attacker would need to run privileged code or exploit a local escalation path. While automated exploitation is unlikely, a successful attack could grant persistent read/write access to user memory, enabling data leakage or corruption.