A sanity check was omitted in the cs42l43 driver of the Linux kernel, allowing firmware supplied to the driver to be smaller than the firmware header it references. The missing size comparison permits the code to dereference a firmware buffer as if it were a header structure, which can result in an out-of-bounds memory read or write. This kernel-level memory corruption may expose sensitive data, crash the system, or provide an escalation path for privileged attackers if the corrupted data is subsequently used for control flow or information disclosure. The vulnerability is a typical example of unchecked bounds validation leading to memory corruption.

The issue affects the Linux kernel firmware subsystem through the cs42l43 driver. No specific kernel release versions are enumerated in the provided data, so any kernel revision that incorporates the affected driver code without the fix would be impacted.

The EPSS score is not available and the vulnerability is not currently listed in CISA KEV, indicating that large-scale exploitation has not been observed. The CVSS score is not supplied, but the nature of the flaw—an out-of-bounds memory operation in kernel space—suggests a high severity impact if exploited. The likely attack vector requires an attacker’s ability to supply a malicious firmware image to the cs42l43 driver, which would normally be performed by local system processes or compromised firmware update mechanisms. Because the fault occurs during firmware processing, exploitation would likely lead to kernel memory corruption or a system crash rather than immediate remote code execution unless additional privilege escalation is possible.