The vulnerability in LuaJIT and OpenRusty luajit2 involves an out-of-bounds read in the stack-overflow handler implemented in the lj_state.c source file. This flaw exists in LuaJIT through version 2.1 and OpenRusty luajit2 versions prior to v2.1-20240314. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable without privileges or user interaction, causing high confidentiality impact and high availability impact, but no integrity impact. The affected versions include specific Ubuntu package versions of LuaJIT and OpenRusty luajit2 as listed. No known exploits in the wild have been reported, and the product is not a cloud service.

Successful exploitation of this out-of-bounds read vulnerability can lead to unauthorized disclosure of information (high confidentiality impact) and denial of service (high availability impact). There is no impact on integrity. The vulnerability can be exploited remotely without authentication or user interaction, increasing its risk profile.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor Ubuntu security advisories and update to fixed versions once available. Until then, cautious use of affected LuaJIT versions is advised.