The vulnerability arises in the Linux kernel's ebtables module where the function compat_mtw_from_user converts user‑supplied 32‑bit ebtables extensions to kernel structures without verifying that the supplied match_size or target_size meet the extension’s required size. If an attacker supplies a size smaller than required, the kernel performs an out‑of‑bounds read, exposing kernel data as reported by KASAN. This flaw can lead to leakage of sensitive information from kernel memory. Based on the description, the primary impact is information disclosure through a memory read beyond bounds.

The flaw exists in Linux kernel releases that include the ebtables netfilter module before the patch, specifically versions 7.1 RC1 through RC5. Vendors affected are Linux:Linux; any kernel running those versions without the latest security updates may be vulnerable.

The CVSS score is 7.8, indicating high severity, and the EPSS score is less than 1%, suggesting a low probability of exploitation. The vulnerability is an out‑of‑bounds read caused by missing input validation, implying that an attacker with knowledge of the ebtables user‑space interface could trigger the fault. The likely attack vector is inferred to be through the ebtables command‑line tool or library, which could be invoked by an unprivileged or partially privileged user. These conditions make the risk high, especially in multi‑tenant environments where untrusted code may invoke ebtables. While the exploitation may be difficult without an exploit chain, the potential for data leakage warrants immediate remediation.