The Linux kernel arm64 ptrace subsystem had a vulnerability where the 'orig_x0' register was not updated in sync with 'x0' during syscall entry tracing. This flaw allowed a tracer process to alter the first syscall argument without undergoing seccomp or audit filtering, potentially bypassing security controls. A prior fix (commit e057b9477232) was incomplete because it failed to update 'orig_x0' after tracer modifications during seccomp ptrace exit. The final resolution involved relocating synchronization logic into the ptrace general-purpose register and syscall setting code to maintain 'orig_x0' consistency with 'x0' on syscall entry.

This vulnerability could allow a local attacker with ptrace permissions to manipulate syscall arguments undetected by seccomp or audit mechanisms, potentially leading to privilege escalation or unauthorized system calls. The CVSS score of 8.4 indicates a high severity with high confidentiality and integrity impact, but no availability impact. Exploitation requires local access and low complexity.

A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include the synchronization fix for 'orig_x0' and 'x0' in the arm64 ptrace code. Since this is a kernel-level issue, updating to the patched kernel version is the recommended remediation. No additional mitigations are indicated.