The vulnerability originates in the Linux kernel's KVM hypervisor when executing under AMD SVM. The code mistakenly uses the active VMCB's MSR bitmap to decide if a model‑specific register is intercepted, instead of recombining the correct bitmaps when the second L2 state is active. This flaw can allow a guest VM to read or write privileged MSRs that should otherwise be hidden, potentially enabling the guest to influence the host system's state or extract sensitive information, which is a classic privilege‑escalation scenario.

The affected products are the Linux kernel implementations that provide KVM‑SVM support. No specific version range is provided in the advisory. Users running any Linux kernel that includes the KVM SVM module before the patch commit may be vulnerable. Since the kernel is open source, the vulnerability exists in all distributions that ship with the unpatched code.

The CVSS score is 8.8, indicating high severity. The EPSS score is < 1%, suggesting a low probability of exploitation in the wild. However, the flaw is exploitable from within a guest. The KEV listing does not report public exploitation. In a typical environment, an attacker who can control a VM could use the flaw to alter host registers or bypass isolation, which could lead to data leakage or compromise of other VMs or the host. The risk therefore remains significant if the kernel is not upgraded, but no evidence of public exploitation suggests a moderate exploit likelihood.