The vulnerability resides in the Linux kernel device tree for Renesas Ironhide boards. The DBSC5 DRAM controller protects memory with inline ECC, which relies on specific carveout regions that must be reserved and never accessed by other code. If these carveouts are not properly marked as reserved memory, the kernel can mistakenly allocate or touch them during high DRAM utilization, corrupting ECC data and potentially destabilizing the system. This flaw represents a classic memory corruption weakness where protected memory is inadvertently accessed or overwritten.

All Linux kernel builds that include the renesas:ironhide device tree and employ the DBSC5 DRAM controller are affected. The issue is specific to devices using the Renesas Ironhide hardware platform where the ECC carveout reservation is required. The vulnerability does not appear to affect generic Linux distributions on unrelated hardware. No version range is provided in the CNA data, so any kernel that contains this device tree entry is potentially impacted.

The CVE scores do not list an EPSS value and it is not included in the CISA KEV catalog, indicating no publicly known exploit at the time of reporting. However, the flaw can be triggered by normal system operation when memory pressure forces the kernel to use the reserved ECC areas. An attacker does not need a remote code execution vector; simply causing the system to reach high memory utilization could lead to instability, crashes, or potential data corruption. Given that no exploitation evidence is disclosed and the issue is hardware-specific, the likelihood of widespread exploitation is low, but the impact is severe if the flaw is exercised.