Based on the description, it is inferred that the Linux kernel contains an out‑of‑bounds read that occurs when reading the minimum alarm voltage in the ltc4282 driver. This flaw can potentially allow a local attacker to read memory locations beyond the intended buffer, potentially revealing sensitive kernel data. It is tied to an improper bounds check during array access and may lead to information disclosure or kernel corruption.

All Linux kernel releases that have not yet integrated the patch for the ltc4282 driver are affected. Distributions using the stock kernel prior to the commit that adds the missing return statement are vulnerable.

Based on the description, it is inferred that the EPSS score is < 1%, indicating a very low probability of exploitation, and that the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 7.8 places the vulnerability in the medium‑high severity range. An attacker would need local kernel access or the ability to interact with the ltc4282 driver to trigger the out‑of‑bounds read. Because the flaw is a read‑time error, exploitation is likely confined to local privileged users unless elevated privileges can be obtained.