The atmel_mxt_ts driver performs a boundary check on configuration data but incorrectly allows the last byte of an object to be processed, resulting in a one-by-byte overwrite into adjacent kernel memory. This unchecked write can corrupt kernel data structures or control information, leading to memory corruption and potential system instability.

The flaw applies to Linux kernels that include the atmel_mxt_ts touch‑screen driver before the patch is applied. Kernel versions 7.1 release candidates rc1 through rc5 are explicitly listed as affected; any kernel build that contains the unpatched driver module is also vulnerable.

The EPSS score is less than 1% and the vulnerability is not listed in the CISA KEV catalog, indicating a low likelihood of exploitation. The CVSS base score of 5.5 suggests moderate severity. Based on the description, it is inferred that the attack vector involves a local user who can supply a malicious configuration file to the driver, potentially allowing that user to corrupt kernel memory. While no active exploits are documented, the potential impact on system integrity makes timely remediation prudent.