The dm array driver in the Linux kernel incorrectly accepts a block whose value_size does not match the caller’s expected size, leading to an out‑of‑bounds read when the driver traverses array entries. This flaw can expose parts of kernel memory or trigger a crash through crafted device‑mapper metadata. The weakness is an inconsistent type of data passed, identified as CWE‑843.

The vulnerability affects the dm array component of the Linux kernel. All deployments of the Linux kernel that include this driver are potentially vulnerable until a patch is applied. No specific kernel versions are listed, so the risk applies to any current kernel that implements the device‑mapper array feature.

The CVSS score of 6.0 indicates moderate severity, and the vulnerability is not listed in the CISA KEV catalog. The EPSS score is reported as less than 1%, indicating a very low probability of exploitation. Exploitation requires the attacker to supply or modify dm array metadata on a block device, typically requiring local or privileged access. As a result, the likelihood of exploitation is moderate in environments that use dm array on untrusted metadata, while production systems with strict configuration controls may face lower risk.