The vulnerability in the Linux kernel for the LoongArch architecture involved the kexec_load(2) path improperly passing a user-space segment buffer directly to strncmp() via an incorrect (char __user *) cast. This caused dereferencing of user pointers in kernel context, flagged by sparse as an address space mismatch. The fix copies the marker-sized prefix of each segment into an on-stack buffer using copy_from_user() before comparison and skips segments that fault, ensuring safe handling of user-space pointers during kexec command line lookup.

The vulnerability could cause the kernel to dereference user-space pointers incorrectly, potentially leading to kernel faults or undefined behavior during the kexec command line lookup process on LoongArch systems. No known exploits in the wild have been reported. The impact is limited to the kernel's handling of kexec command line segments on the LoongArch architecture.

A fix has been implemented in the Linux kernel source code for the LoongArch architecture that properly copies user-space data into kernel space before comparison, preventing address space mismatches. Users should update their Linux kernel to a version that includes this fix once available. Patch status is not yet confirmed — check the vendor advisory or Linux kernel mailing lists for current remediation guidance.