The Linux kernel’s ethtool subsystem includes a Netlink fallback for reading EEPROM data that checks only the offset against the stored EEPROM length. It fails to verify that the requested read length does not extend beyond the buffer, creating a classic out‑of‑bounds read. This flaw could cause unpredictable data leakage or corruption when drivers or firmware process the returned buffer. The vulnerability is a pure input‑validation failure and is classified as CWE‑125.

All Linux kernel builds that use the original ethtool EEPROM code before commit 0e1826898 are affected. This includes custom kernels and vendor distributions that have not applied the patch. Kernel releases incorporating the updated ethtool implementation are not vulnerable, and the Netlink interface for EEPROM reads is safe thereafter.

The flaw has a CVSS score of 7.8, indicating moderate to high severity. The EPSS score is less than 1 % and the vulnerability is not listed in CISA’s KEV catalog, suggesting low likelihood of exploitation. Attack requires local access to the kernel’s ethtool Netlink interface; no remote or privilege‑escalation vectors are described. An attacker could read beyond the EEPROM buffer, but no confirmed impact on system integrity or confidentiality is documented in the advisory.