A driver that manages clock hardware for the 9FGV0841 device allocates space for eight `clk_hw` pointers, but the device actually registers eight outputs. When the driver writes pointers 4 through 7 into an array that has only eight slots, the write goes beyond the allocated bounds and corrupts adjacent data in the `rs9_driver_data` structure. The corruption may not immediately crash the kernel, but it does corrupt kernel memory and causes a crash when the driver is unloaded or during suspend operations.

All Linux kernel builds that include the unpatched rs9 clock driver and are connected to a 9FGV0841 device are affected. The advisories do not specify a kernel version range, so the vulnerability applies to any kernel that contains the original driver code before the fix is merged.

The CVSS score is 5.5, the EPSS score is < 1%, and the vulnerability is not listed in CISA’s KEV catalog. The failure mode is a local out‑of‑bounds write; the likely attack vector is local, requiring an attacker to have access to the system or to interact with the 9FGV0841 hardware to trigger the vulnerable driver code. No widespread remote exploitation has been documented as the flaw lies in a kernel device driver.