Zephyr: The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tlb_page() in arch/arm64/core/mmu.c, which issued TLBI VAE1{IS} with an operand of virt >> 12. That operand encodes the ASID in bits [63:48], so the invalidation only ever matched ASID 0 (the kernel page tables) and global entries. Memory domains, however, are allocated ASIDs starting at 1 in arch_mem_domain_init(), and every domain-private leaf created by private_map() is mapped with MT_NG, i.e. non-global. A domain's cached translation therefore survived the invalidation. All callers of invalidate_tlb_page() are demand-paging paths. When the eviction algorithm reclaims a frame, page_frame_prepare_locked() in kernel/mmu.c calls arch_mem_page_out(), which marks the kernel leaf invalid, propagates the invalid descriptor into every domain via sync_domains(), and then flushes only ASID 0. do_page_fault()
You get about 15.6M $FIXZEPHYR, after pump.fun’s fee. An estimate.
Demo coins live on a pretend chain. Real coins open on pump.fun, where your wallet signs the trade.
Patch Zephyr: a demo coin filed under CVE-2026-79979, on a pretend chain.
80% to the launcher20% to the Patch Day treasury
Creator fees. Locked at launch on pump.fun. Nobody can change it later, including us.