The flaw lies in scmi_power_name_get() within the ARM SCMI firmware driver, where the function fails to check the domain number provided by an external caller. This omission permits an out‑of‑bounds memory read by accessing beyond the array that stores domain names. An attacker capable of influencing the domain argument can trigger this read, which may lead to a kernel fault or the accidental exposure of kernel memory contents. Such behavior can disrupt system stability, potentially causing a crash or reboot, and represents a classic buffer overread that may result in denial of service.

The vulnerability affects all Linux kernel builds that contain the ARM SCMI driver, meaning any distribution kernel that includes the linux_kernel source with the flaw remains impacted. No specific vendor or version information is provided beyond the generic Linux designation; thus any kernel versions prior to the commit that added bounds checking are susceptible.

The CVSS score of 7.8 indicates high severity, while the EPSS score of less than 1% suggests a low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Nonetheless, because the flaw allows an attacker to induce an out‑of‑bounds read that could crash the system or possibly leak information, the risk justifies prompt remediation.