The Linux kernel’s MTD Intel DG driver contains an array‑index‑out‑of‑bounds bug that occurs when it reads the 'regions' array before the 'nregions' counter is initialized, causing a UBSAN error and potentially corrupting kernel memory. Based on the description, it is inferred that an attacker capable of interacting with the vulnerable code path could trigger the out‑of‑bounds access and exploit it to corrupt memory. The patch also corrects silent ENOMEM handling so the driver no longer ignores allocation failures.

All unpatched Linux kernel releases that ship the mtd_intel_dg.c driver are affected, as the CPE covers the entire Linux kernel and no specific version range is listed; every distribution that has the vulnerable code before the fix is in scope.

The EPSS score is not available and the vulnerability is not listed in CISA KEV, but the index‑out‑of‑bounds nature in kernel space indicates high risk for memory corruption. Based on the description, it is inferred that the likely attack vector involves an attacker interacting with the mtd_intel_dg driver (for example, by creating or accessing MTD partitions) to trigger the out‑of‑bounds condition. This could allow a local attacker with write access to the driver to cause kernel crashes or potentially gain elevated privileges; exploitation requires loading or using the driver, so local or remote scenarios are possible depending on system configuration.