In the Linux kernel, the routine that updates firmware control data does not verify that the number of elements reported by firmware fits within the actual buffer that has been allocated. As a result, the memcpy operation can write beyond the end of the allocated region. This can corrupt adjacent kernel memory, potentially allowing an attacker to gain code execution or cause a system crash. The weakness corresponds to a classic unchecked buffer boundary condition (CWE‑122).

All Linux kernel installations that use the Advanced Sound Architecture (ASoC) subsystem with the System on Chip (SOF) firmware driver without the patch applied are potentially affected. No specific kernel version range was supplied, so any build compiled before the include of the bounds check commit is vulnerable.

The CVSS score is 7.8 and the EPSS score is less than 1%, indicating high severity but a low likelihood of exploitation. The vulnerability involves a heap-based buffer overflow, which historically can be leveraged for remote or local privilege escalation depending on how the driver is invoked. Because the patch has already been merged into the kernel, the risk is mitigated in recent releases, but any system still running an unpatched kernel is considered at high risk. The KEV catalog does not list this issue, meaning no known mass exploitation has been reported, but the potential impact of a successful exploitation remains significant.