The linux kernel’s intel‑quickspi HID driver contains an unbounded memcpy when processing a GET_REPORT request. The driver copies the entire device‑supplied report into a caller‑provided buffer without verifying the requested length. This classic buffer overflow can corrupt kernel memory, potentially allowing an attacker to elevate privileges or cause a denial of service.

The flaw resides in the intel‑ linux system that loads this module and uses an Intel touch controller or other HID devices via the quickspi interface is all kernels containing the unpatched driver before the fix should be considered vulnerable.

The CVSS score of 6.6 indicates moderate severity. The EPSS score of less than 1 % suggests a low probability of exploitation in the wild, and the vulnerability is not listed in CISA’s KEV catalog. An attacker would need local or direct device access to craft a malicious HID report; therefore the attack surface is limited to users or processes that can communicate with the HID device. If successfully exploited, the kernel buffer overflow could lead to privilege escalation or denial of service. The likely attack vector is local device manipulation, as implied by the need to send a crafted report to the device.