The vulnerability arises in the Linux kernel's ARM Firmware Framework (arm_ffa) component, where the PARTITION_INFO_GET_REGS function accepts indices supplied by firmware without adequate validation before copying partition descriptors into a caller buffer. This unchecked copy loop can write past the end of the allocated array, potentially corrupting kernel memory and leading to arbitrary code execution with kernel privileges. The flaw falls under the buffer overflow weakness and could allow a privileged attacker to corrupt memory or execute arbitrary code with kernel privileges. The description confirms that the issue is mitigated by rejecting inconsistent counts or index progressions, preventing the copy loop from overflowing.

Linux kernel distributions that include the arm_ffa subsystem are affected. The specific product is Linux:Linux, but any kernel build that lacks the recent fix may be vulnerable.

The EPSS score is less than 1%, indicating a low probability of exploitation in the wild at the time of this analysis, and the vulnerability is not listed in the CISA KEV catalog. Nevertheless, because the flaw resides in kernel code and can lead to memory corruption, the potential impact is severe. Based on the description, the likely attack path requires access to the ARM FFA interface, implying a privileged or local attack vector; however, the exact attack vector is inferred and not directly stated in the CVE data, and an attacker could surface the vulnerability through compromised firmware modules.