An out‑of‑bounds array read occurs in the ALSA asihpi driver when the find_control() function retrieves cached control data using a supplied index without bounds checking. The unchecked lookup can read beyond the intended array, potentially exposing sensitive kernel memory contents. This represents a CWE‑125 buffer over‑read vulnerability and could leak confidential data; the description does not indicate a crash or denial of service, so those outcomes are not asserted.

Linux kernel builds that include the ALSA asihpi driver are affected. All kernel versions lacking the commit that introduces the bounds‑check logic are at risk; the precise version range is not specified. Thus any kernel containing the vulnerable driver until the patch is applied may be compromised.

The CVSS score of 7.8 signals high severity, yet the EPSS score of less than 1 % and the absence from the CISA KEV catalog imply a low probability of widespread exploitation. Based on the description, the likely attack vector is local, requiring an attacker to trigger the faulty lookup—this could involve crafting an audio control command or escalating privileges to load or interact with the asihpi module. No publicly documented exploit code is known, and the flaw does not provide remote code execution, but a privileged local attacker could read unintended kernel memory.