A bounds‑checking error in the Linux kernel’s snp_filter_reserved_mem_regions() function allows an off‑by‑one heap buffer overflow when a specially crafted range list with 255 elements is processed. The overflow occurs because the check does not account for the incoming entry, allowing data beyond the allocated PAGE_SIZE buffer to be written. An attacker with the ability to supply such data to the crypto CCP module could corrupt kernel memory or gain arbitrary code execution, effectively elevating privileges to kernel level. The flaw is a classic heap‑based buffer overflow and is therefore an exploitable vulnerability that can compromise system confidentiality, integrity, and availability.

The vulnerability impacts all Linux kernels that include the crypto CCP component. No specific version numbers are listed in the data, so it may affect multiple releases until a patch is applied. This includes standard distributions that ship the upstream kernel.

The CVSS score is 7.8, indicating high severity. The EPSS score of 0.00186 indicates a very low but non‑zero probability of exploitation in the general population, though the flaw remains valuable for targeted attacks. The vulnerability is not listed in the CISA KEV catalog, which does not reduce the risk of a targeted exploitation. Given that the flaw resides in a low‑level component, an attacker would likely need to inject crafted data into the CCP module, which may be limited to privileged or privileged‑escalated users, but the potential impact remains severe.