In the Linux kernel’s regulator subsystem for the FP9931 device, the VPOS/VNEG selector table contains a duplicate entry for 7.04 V and is missing the final 23 entries that clamp higher values to 15.06 V. Because the table has only 41 entries, any selector value above 0x28 causes an out‑of‑bounds array read. The result is memory corruption that can lead to kernel crashes or, if exploited, privilege escalation because the fault occurs in high‑privilege kernel code. This flaw is a classic buffer overflow.

All Linux kernel builds that ship the unpatched FP9931 regulator driver are affected. This includes any distribution that provides the kernel without the upstream commit that fixes the table size and contents. The specific kernel release list is not enumerated in the advisory, so administrators should treat all kernels that have not yet applied the patch for the FP9931 driver as vulnerable.

The EPSS score is < 1 % and the vulnerability is not listed in the CISA KEV catalog, indicating a low historical exploitation probability. However, the CVSS score of 8.4 denotes high severity. Based on the description, it is inferred that attackers would need to manipulate regulator settings, which could be achieved through device firmware, custom drivers, or code running with kernel privileges. If successful, the out‑of‑bounds access could compromise system integrity or availability.