The reported kernel issue is an off‑by‑one bounds check in the iwlwifi driver for the Linux kernel. Before the driver examines the eleventh byte of a packet‑related data structure, it performs an insufficient length check, allowing an out‑of‑bounds read. This shortfall can result in a kernel crash, memory corruption, or leakage of privileged data, depending on how the read data is subsequently used.

This flaw exists in any Linux installation that incorporates the iwlwifi driver, which is used for Intel wireless hardware. All kernel versions before the patch that introduced the corrected length check are potentially affected; the specific affected releases are not enumerated in the CVE.

The EPSS score for this vulnerability is not available and it is not listed in the CISA KEV catalog, indicating that there is limited public evidence of exploitation. The CVSS score is not supplied, so the severity must be inferred from the nature of the flaw. The attack vector would likely involve sending crafted network traffic to trigger the out‑of‑bounds read, requiring the malicious payload to be processed by the vulnerable driver. The exploit would need to reach the kernel through a local or remote interface that can influence packet handling.