The mtd_intel_dg.c driver in the Linux kernel performs an array-index-out-of-bounds access before initializing the nregions counter that tracks valid entries. The UBSAN trace points to line 750 where the index 0 is accessed without prior bounds verification. Based on the description, it is inferred that this out-of-bounds access could corrupt kernel memory, lead to a panic, or otherwise destabilize the system. The driver also silently ignores ENOMEM failures and continues to populate the array, which may further compromise state consistency and memory integrity.

All Linux kernel builds that include the unpatched mtd_intel_dg.c module are affected. The CPE entry applies broadly to all kernel revisions, so any distribution shipping this driver before the fix is at risk. The issue is local to systems that expose the Intel DG MTD device to user space.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% reflects a low exploitation likelihood. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that exploitation requires local access to the Intel DG device; an attacker would need to trigger the out-of-bounds read by interacting with the device. Because the flaw resides in kernel space, a successful exploitation would affect the entire system and could enable privilege escalation if executed by a privileged or compromised process.