This vulnerability arises from insufficient enforcement of extension policies in Google Chrome on Linux before version 150.0.7871.47. An attacker can exploit this by tricking a user into installing a malicious Chrome extension, which can then perform UI spoofing attacks. This could mislead users by presenting deceptive user interface elements within the browser. The vulnerability is specific to Linux versions of Chrome and is addressed starting with version 150.0.7871.47.

The impact is limited to UI spoofing, which can deceive users into believing they are interacting with legitimate browser UI elements or websites. This could facilitate phishing or other social engineering attacks but does not indicate direct code execution or privilege escalation. The vulnerability requires user interaction to install a malicious extension, limiting its exploitation scope.

A fixed version is available: users should update Google Chrome on Linux to version 150.0.7871.47 or later. There is no indication of any temporary workarounds or mitigations. Users should avoid installing extensions from untrusted sources to reduce risk.