The vulnerability is an off‑by‑one write in the hp_get_string_from_buffer function of the Linux kernel. When a caller supplies a string that exactly fills the destination buffer, the function writes a NUL terminator one byte beyond the buffer boundary. This can overwrite adjacent data, potentially corrupting kernel memory and leading to crashes or other instability. The weakness is a buffer overflow (CWE‑193).

The flaw exists in the Linux kernel source tree under platform/x86/hp‑bioscfg. Any distribution that ships a kernel containing this function—particularly the hp_get_string_from_buffer path, path[512], current_value[512], current_password/current_value[64], and the per‑entry encodings and prerequisites arrays—may be affected. Version information is not specified; users should check whether their running kernel includes the patch present in the stable 6.x series or later.

With a CVSS score of 5.1, the vulnerability is considered moderate. The EPSS score is less than 1%. The vulnerability is not listed in CISA KEV. Based on the description, it is inferred that an attacker would need to manipulate HP BIOS configuration strings, which generally requires physical access or firmware‑level privileges; therefore the likelihood of exploitation is low unless the system is exposed to compromised firmware or an attacker can inject strings via BIOS interfaces.