This vulnerability, identified as CVE-2026-8149, affects the BC-FJA cryptographic library from Legion of the Bouncy Castle Inc., specifically versions 2.1.0 through 2.1.2. It impacts Linux x86_64 systems utilizing AVX and AVX-512f instruction sets and involves the gcm128w and gcm512w program files. The weakness is categorized under CWE-1068, which relates to insufficient protection against certain types of attacks or misuse. The CVSS 4.0 base score is 5.1, indicating a medium severity level. No vendor advisory or patch information is currently available, and no exploits have been reported in the wild.

The vulnerability could potentially allow an attacker with local access to exploit weaknesses in the affected BC-FJA components, possibly leading to limited impact given the CVSS vector indicates local attack vector and low privileges required. However, no specific impact scenarios or exploitation details are provided. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been announced, users should monitor updates from Legion of the Bouncy Castle Inc. and plan to apply any forthcoming patches promptly. No other specific mitigation steps are indicated based on the available information.