The flaw occurs in the Linux kernel adm1275 driver when reading a block of data from an ROHM BD127X0 hot‑swap controller. The driver calls i2c_smbus_read_block_data() to fill a 32‑byte stack buffer with device data, but does not place a null terminator and may read fewer bytes than the buffer length. Subsequent use of strncasecmp() compares the returned string against known device names up to the target string’s length, potentially overrunning the initialized portion of the buffer and exposing uninitialized stack memory to the rest of the kernel. This can leak internal kernel data, violating confidentiality of memory accessible to the execution context.

The vulnerability is present in all Linux kernel releases that compile the adm1275 driver before the patch. It applies to any system running the adm1275 module, regardless of distribution, as the issue is in the kernel source code under the hwmon subsystem.

The CVSS score is 5.5, EPSS <1%, and the vulnerability is not listed in the CISA KEV catalog. The flaw does not immediately grant code execution, only information disclosure via an out‑of‑bounds read. There are no publicly known exploits and the situation is not listed in the CISA KEV catalog. Attackers would need local privileged or kernel access and the presence of a supported device to trigger the read, so the risk is considered moderate. The safest course is to apply the patch that zeroes the stack buffer before use.