This vulnerability in the Linux kernel’s HID subsystem allows an attacker to overflow a heap buffer used by the intel‑thc‑hid: intel‑quickspi driver. By sending a SET_REPORT or SET_FEATURE ioctl with a report larger than the driver’s maximum report length, the kernel copies the attacker‑controlled data into a buffer that is not properly sized, corrupting kernel memory. Such corruption can lead to arbitrary code execution or privilege escalation if the attacker can influence the kernel’s control flow.

All Linux kernel installations that include the intel‑thc‑hid: intel‑quickspi driver are affected. No specific kernel or device release is listed, so any kernel version containing this driver without the patch is potentially vulnerable.

The CVSS score of 7.0 indicates high severity. The EPSS score of < 1% indicates a low probability of exploitation, and the vulnerability is not currently listed in CISA’s KEV catalog. Attack requires the ability to access the hidraw interface. If such access is available, an attacker can abuse the buffer overflow to corrupt kernel memory is thus a significant local security risk that could be leveraged by privileged or local users.