This vulnerability (CVE-2026-8149) affects Legion of the Bouncy Castle Inc. cryptographic libraries BC-LTS and BC-FJA on Linux x86_64 platforms with AVX and AVX-512f instruction sets. It involves specific program files related to GCM (Galois/Counter Mode) implementations. The affected versions are BC-LTS from 2.73.0 up to but not including 2.73.11, and BC-FJA from 2.1.0 up to but not including 2.1.3. The vulnerability is categorized as CWE-1068, which relates to improper handling of exceptional conditions or errors. The CVSS 4.0 base score is 5.1 (medium severity), indicating a locally exploitable issue with low complexity and no user interaction required. There is no vendor advisory or patch information available at this time.

The vulnerability could potentially allow an attacker with local access to exploit a flaw in the cryptographic implementation of BC-LTS and BC-FJA libraries on affected versions. The CVSS vector indicates local attack vector with low complexity and no privileges or user interaction required, but the impact is limited to availability. No known exploits are reported in the wild. The exact impact details beyond the CVSS vector are not provided.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor for updates from Legion of the Bouncy Castle Inc. and apply any future patches promptly. Until then, consider limiting local access to affected systems and avoid using vulnerable versions where possible.