In the cs42l43 multi-function device driver of the Linux kernel, the firmware size is not verified against the size of the firmware header. A firmware that is smaller than the header causes the driver to treat the buffer as a header structure, resulting in an out-of-bounds memory access. This flaw corresponds to CWE‑805 and can lead to kernel memory corruption, potentially causing a system crash or denial of service.

The vulnerability is present in all Linux kernel releases that include the cs42l43 driver prior to the commit that adds the size check. Because no specific kernel version numbers are listed, any kernel revision containing the unpatched driver code may be affected.

The EPSS score is below 1 % and the vulnerability is not listed in the CISA KEV catalog, implying a low likelihood of widespread exploitation. The CVSS score of 5.5 denotes a moderate severity impact if used. The likely attack vector is the supply of a malicious firmware image to the cs42l43 driver via a local firmware update mechanism or a compromised firmware source. Exploitation would most likely cause kernel memory corruption or a system crash; remote code execution would require additional privilege escalation steps.