The patch indicates that the Ethos-U NPU command stream parser incorrectly masked an IFM region index, allowing values up to 127 instead of the intended 0–7 range. A userspace caller can supply a command stream that writes beyond the allocated `region_size` array, corrupting adjacent kernel heap data. This buffer overflow could lead to arbitrary memory corruption, potentially enabling privilege escalation or a denial‑of‑service if the kernel crashes.

The affected product is the Linux kernel on any distribution that includes the Ethos‑U driver before the patch commit. No specific kernel versions or release dates are listed, so all kernel releases that contain the vulnerable `accel/ethosu` code path are potentially affected until the patch is applied.

The vulnerability is local and requires a user or process that can invoke the NPU ioctl or related userspace interface. The EPSS score is not available, but the absence from the CISA KEV list indicates no publicly known exploits at this time. The CVSS can be inferred as high due to local privilege escalation potential and the kernel matter. Attackers with local access could craft a malicious command stream to trigger the buffer overflow and corrupt kernel memory.