The FP9931 regulator driver contains an incorrectly sized voltage selector table. The mapping is shifted by one entry and lacks the final 23 restrictive entries, meaning that any selector value greater than 0x28 triggers an out-of-bounds array read. The fault can corrupt kernel memory or cause a crash, potentially compromising system reliability or granting an attacker elevated privileges if the fault is exploited. This vulnerability is a classic buffer overflow error caused by incorrect array bounds in kernel code.

The flaw arises in the Linux kernel’s regulator subsystem for the FP9931 device. All kernel builds that include this driver for the FP9931 hardware are affected. The issue is scoped to Linux kernel versions that have not applied the upstream fix and do not contain the corrected 64‑entry table. The precise kernel release list is not provided, so any distribution using an unchanged FP9931 driver is considered at risk.

EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog. The problem is an out-of-bounds memory access that could be triggered by setting regulator values beyond the allowed range; the attack vector is inferred to be through regulatory configuration interfaces, possibly accessed by firmware or external devices. Because the kernel runs with high privilege, such a fault could lead to privilege escalation or denial of service. Although CVSS scores are not supplied, the nature of the bug warrants serious attention until the patched driver is deployed.