The vulnerability occurs in the Linux kernel’s hwmon pmbus subsystem. In the notification routine, each device attribute is unconditionally cast to a sensor_device_attribute. When the attribute actually belongs to a different structure such as pmbus_samples_reg or pmbus_sensor, the cast causes the code to read an index field that resides past the end or overlapped with other fields. This type confusion can trigger an out‑of‑bounds read, potentially exposing kernel memory, which could lead to sensitive data disclosure.

The flaw is present in any Linux kernel build that implements the hwmon pmbus module and predates the patch commit 0b121de89a99c54bcf516999b04e8531c84f08d5. No specific kernel versions are listed, so all kernels prior to that commit are considered vulnerable.

EPSS is < 1% and the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 8.4 indicates high severity. No public exploit has been reported. The out‑of‑bounds read could expose kernel memory, leading to information disclosure. The attack vector is not explicitly defined in the CVE description; it could be triggered by the kernel’s handling of pmbus notifications. The likelihood of exploitation is uncertain at this time.