In the Linux kernel’s ALSA Advanced Linux Sound Architecture (ASoC) topology parsing, certain fixed‑size arrays that hold PCM and DAI names are passed directly to unbounded string functions such as strlen without proper null‑termination checks. A malicious topology blob that omits the terminating NUL byte can therefore cause an out‑of‑bounds read, possibly leading to a kernel panic or exposing kernel memory. The fault matches CWE‑125.

The flaw exists in any Linux kernel that includes the unpatched ASoC topology parser. All vendors that ship the stock Linux kernel—including upstream and distribution builds—may be impacted if the vulnerable code path is exercised. No specific version range is published, so users should verify whether their kernel package incorporates the recent fix.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1 % suggests a very low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog. Attackers would need to deliver a crafted topology blob, typically through user‑space audio drivers; this inference is drawn from the nature of topology parsing. Consequently, the risk is moderate, with the most likely outcome being a loss of service rather than a breach of confidentiality or integrity.