This vulnerability arises from improper input validation of a frequency index in the kernel apsys DVFS driver, potentially causing an out‑of‑bounds read or corruption of a hardware register. The flaw could lead to system instability or a denial‑of‑service condition when executed locally with sufficient privileges.

The affected product is the kernel component supplied by Unisoc (Shanghai) Technologies Co., Ltd. Specific affected kernel versions are not listed in the advisory, so any system running an unpatched Unisoc kernel may be vulnerable.

The CVSS score of 5.5 indicates moderate severity. The exploit is available only to users with local privileges and no exploit probability is supplied; it is not currently listed in CISA's KEV catalog. Because the issue requires local access and results in denial of service, the risk to confidentiality and integrity is low, but availability impact could be significant for critical workloads. The vulnerability can be exploited by calling the DVFS driver with a crafted frequency index value that bypasses bounds checks, resulting in memory corruption.