The flaw is in the ALSA control subsystem of the Linux kernel, where the function that initializes enumeration names walks past a buffer while decrementing a counter without first verifying that the counter is non‑zero. When the counter reaches zero, the loop calls fortified strnlen with a maximum length of zero, causing a BRK exception that crashes the kernel. The crash results in a kernel panic and a system reboot, effectively denying service.

All Linux kernel builds that include the ALSA control driver and that have not incorporated the upstream patch adding a guard against zero buffer length. The issue is present in the default kernels shipped by distributors until they apply the updated source, as the product is the Linux operating system in general.

The CVSS score of 5.5 indicates a moderate severity, and the CVE is not listed in the CISA KEV catalog. Exploitation requires local access to the ALSA control interface; a user process can supply crafted enumeration values that trigger the bug. Remote exploitation is unlikely because the vulnerability is confined to kernel space and depends on local manipulation of ALSA controls. The primary risk is a denial‑of‑service from a kernel panic that can interrupt all processes on the affected system.