Based on the description, it is inferred that an attacker with local privileged access could set an oversized request length in the UVCIOC_SEND_RESPONSE ioctl, causing the kernel to perform a memcpy that reads past the end of the 60‑byte source buffer. This buffer over‑read can expose arbitrary kernel memory contents or trigger a crash, thereby compromising confidentiality or availability of the system.

The vulnerability is present in the Linux kernel's UVC gadget implementation on all distributions that ship an unpatched kernel with the affected driver. The exact versions are not listed, so any kernel release prior to the patch that includes the UVC gadget code is potentially affected.

The CVSS score of 6.1 indicates moderate severity, and the EPSS score is below 1% indicates a low exploitation probability. The flaw is not listed in CISA KEV. Based on the description, it is inferred that exploitation would require local privileged access to issue the UVCIOC_SEND_RESPONSE ioctl, normally granted to root or users with CAP_SYS_ADMIN. With that permission, an attacker can craft a request that triggers the over‑read and read kernel memory or cause a denial of service. No public exploitation has been reported to date, but the potential impact remains significant.