The vulnerability resides in the Linux kernel’s qede network driver, where the out-of-bounds check for the cqe->len_list[] array was moved to precede element access. Without this check, an attacker could trigger an out-of-bounds read of the array, potentially exposing kernel memory contents or causing a kernel panic. The flaw represents a classic buffer over-read condition that could be leveraged to obtain sensitive data or disrupt system availability.

All Linux kernel installations that incorporate the qede driver before the patched commit are affected. The affected code path exists in the generic Linux kernel and thus any distribution that has not yet applied the fix is vulnerable. No specific kernel version numbers are documented in the publicly available references, but the issue was addressed in a commit referenced in the provided git links.

The CVSS and EPSS scores are not published, so the exact severity and likelihood remain undefined. Because the flaw is situated within kernel code, exploitation requires sufficient access—either local privileged execution or a path that can trigger the vulnerable array access. Attenuation is possible through driver blacklisting, but a local attacker or one with hardware-level control could still avail themselves of kernel memory exposure or a denial‑of‑service event. The vulnerability is not listed in CISA’s KEV catalog, indicating no confirmed publicly known exploit at this time.