The vulnerability occurs when messages sent from the console subsystem to the Linux kernel’s netconsole interface are not null‑terminated. The netconsole_write logic then reads beyond the allocated buffer, producing an out‑of‑bounds read that can expose arbitrary data from the kernel heap or trigger a kernel fault observed in KASAN logs. This classic buffer overread and string handling flaw is identified as CWE‑125 (Out‑of‑Bounds Read) and CWE‑170 (String Not Null-Terminated). The over‑read can lead to information disclosure or a kernel crash, affecting confidentiality and availability of the affected kernel. Based on the description, it is inferred that the likely attack vector involves injection of malformed console messages, which requires either local privileged access or remote control of the netconsole network endpoint.

Affected systems are Linux kernel installations that include the netconsole restriction console infrastructure before the commit 7eab73b18630 introduced proper null termination. The advisory does not list explicit kernel versions, so any kernel that exposes netconsole without that patch meets the vulnerability criteria. The vulnerability applies to all variants that use the netconsole subsystem, regardless of distribution.

The CVSS score of 9.1 indicates high severity. The EPSS score of < 1% indicates a very low probability of exploitation, and the CVE is not listed in CISA KEV, suggesting limited or no publicly documented exploitation. Based on the description, it is inferred that the attack requires either local privileged access or remote administrative control over the netconsole network interface, which limits the attack surface. Nevertheless, the over‑read can lead to information disclosure or a kernel crash, which would provide a foothold for further escalation, so the overall risk is considered high for systems with exposed netconsole.