The Linux kernel tegra210_ahub driver contains a bug where the function tegra_ahub_put_value_enum() reads an element from the e->values array using an index supplied by the caller before verifying that the index is within the valid range. This out-of-bounds read is a kernel bounds check flaw and is listed as CWE‑1285, which can leak sensitive kernel memory contents to a local attacker. The flaw does not grant arbitrary code execution but may allow an attacker to view confidential data stored in the kernel, leading to information disclosure.

The affected component is the tegra210_ahub driver in the Linux kernel for Tegra platforms. All releases that include this driver prior to the commit that relocates the bounds check are vulnerable. The fix is incorporated in the kernel source branches referenced in the provided commit URLs. Updating to a kernel that includes these commits resolves the issue.

The Exploit Prediction Scoring System calculates an EPSS below 1%, indicating a very low probability of exploitation. The CVSS score of 7.1 reflects a high severity, primarily due to the confidentiality impact. The vulnerability is not listed in the CISA KEV catalog. The exact attack vector is not explicitly described but would require the ability to cause the driver to process an out-of-range enumeration value, which typically would arise from a local user or a component with kernel privileges.