A logic error in the hwcrypto-kdn.c function kdn_set_sysregs_prot permits local information disclosure when system execution privileges are available. The bug exposes sensitive data to any code running with system-level access, consistent with CWE-269.

The vulnerability affects Android devices from Google. No specific product names or versions are listed beyond the general Android platform, and no fine‑grained version details are available.

User interaction is not required, and exploitation can be performed by any code that already has system execution privileges. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no publicly known active exploits at the time of this analysis. The CVSS score of 4.4 indicates a moderate risk for local information disclosure, but the absence of an exploit does not negate the potential impact for privileged malware or malicious users on the device.