The flaw lies in the Xbox Remote control driver, where an IO buffer is placed inside the device structure, violating the kernel’s DMA coherency rules. This misplacement can cause stale or corrupted data to be exchanged between the CPU and the device, potentially leading to kernel memory corruption. If an attacker can cause the driver to misbehave, they may be able to alter kernel memory or disrupt system integrity.

Any Linux system running a kernel that includes the xbox_remote driver before the patch is susceptible. The vendor does not list specific kernel versions, so any build with the unpatched driver is considered vulnerable.

The CVSS score of 5.5 indicates medium severity. With an EPSS score of less than 1 % and no listing in the CISA KEV catalog, public exploitation is unlikely so far. The vulnerability applies when the xbox_remote module is loaded, so a local attacker with sufficient privileges to load or interact with the module could potentially trigger the fault. Disabling or removing the driver reduces the attack surface.