The TAS2781 firmware parser in the Linux kernel reads variable‑length description strings with strlen before verifying that the string is terminated inside the firmware blob. A firmware image that omits the expected NUL terminator can lead the parser to walk past the end of the firmware buffer before size checks run, resulting in an out‑of‑bounds read that exposes kernel memory or corrupts kernel state. This flaw is a classic memory disclosure vulnerability (CWE-170).

All installations of the Linux kernel that include the ASoC TAS2781 driver are affected; the vulnerability exists wherever the driver and its firmware parsing code are compiled and executed. Affected releases are not enumerated in the CVE data.

The likely attack vector involves an attacker supplying a malformed firmware image to the TAS2781 driver, which typically requires local access to the firmware installation path or the ability to trigger firmware loading on the target device. Based on the description, it is inferred that this is the primary prerequisite for exploitation. The EPSS score of <1% indicates a low probability of exploitation, and the CVSS score of 7.1 denotes medium severity. The vulnerability is not listed in CISA’s KEV catalog. Because the flaw is an out‑of‑bounds read, exploitation could lead to kernel memory information disclosure or further privilege escalation if additional weaknesses are leveraged.