In the Linux kernel, the HID PlayStation driver contains a bounds‑check flaw that allows a weaponized controller to supply an out‑of‑range value for the number of touch reports. During parsing, the driver reads beyond the end of the internal touch_reports array, potentially consuming up to 2 KiB of adjacent kernel memory. If the DS4_TOUCH_POINT_INACTIVE bit is set, the incorrectly read data is emitted through the evdev interface, yielding a data leak that can expose sensitive kernel contents. The vulnerability is a classic example of CWE‑805, unchecked bounds verification leading to a read‑of‑memory error.

The defect resides in the generic Linux kernel HID subsystem and would affect any distribution that ships a kernel version containing the buggy dualshock4_parse_report implementation. No specific patch level or vendor variant is listed, so any kernel not yet updated with the clamping change is potentially affected.

Based on the description, it is inferred that an attacker must have physical access to a PlayStation controller connected to the host and appropriate permissions to read the corresponding evdev device node. The CVSS score of 8.1 indicates high severity, while the EPSS score of < 1% suggests a low but nonzero probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog, implying no known large‑scale exploitation at the time of publication. The attack could lead to kernel memory disclosure and potentially further compromise if sensitive data is leaked, but it requires local device access and is thus considered a physical or local attack vector.