An out‑of‑bounds array access in the Microchip MPFS‑CCC clock driver occurs when the system registers the last two outputs. Because the driver allocates space only for two PLLs and their four divider outputs, but the identifier list includes additional DLL outputs, the write goes past the allocated buffer. This memory corruption can overwrite adjacent kernel data and trigger a crash or instability. The defect is detected by UBSAN but does not provide direct code execution, so the immediate consequence is denial of service through kernel panic or erratic behavior. This vulnerability involves both out‑of‑bounds reads and writes (CWE-125, CWE-131).

Any Linux system that compiles the Linux kernel with the microchip MPFS‑CCC clock driver and has the corresponding hardware controller present is affected. This includes all kernel configurations that enable the device—both vendor‑specific builds and open‑source distributions—unless the driver has been removed or the kernel has been updated past the vulnerable revision. No specific release range is listed, so current kernels that retain the unpatched code are at risk.

The CVSS score is 7.1 and the EPSS score is < 1%, indicating a low but non‑zero exploitation probability. However, the flaw is a classic out‑of‑bounds write (CWE‑131) combined with an out‑of‑bounds read (CWE‑125) and can lead to a kernel crash. Exploitation requires the vulnerable driver to be loaded and for an attacker to trigger the problematic output registration, which likely requires privileged or local access during reboot or module load time. The vulnerability is not listed in CISA's KEV catalog, indicating no publicly known exploits at this time, but the potential for denial of service remains.