The vulnerability in the Linux kernel arises from missing boundary checks in two ACPICA helper functions, acpi_ps_get_next_namestring() and acpi_ps_peek_opcode(). The omission allows read access beyond intended buffer boundaries, potentially exposing sensitive information or enabling a more complex attack. The fix introduces explicit boundary validations to prevent over‑read of buffers.

All installations of the Linux kernel that incorporate the ACPICA subsystem and have not applied the recent patch are potentially vulnerable. The patch addresses the core kernel source code; therefore any distribution version prior to the inclusion of the fix is at risk, regardless of vendor or distribution.

EPSS is not available and the vulnerability is not listed in CISA’s KEV catalog, so the current exploitation prevalence is unknown. Based on the description, it is inferred that the attack vector is local, likely requiring the ability to trigger ACPICA processing, which may need privileged or kernel context. The absence of proper bounds means an attacker could read memory beyond intended limits, which could lead to information disclosure or provide a foothold for privilege escalation. The risk is medium‑high with a CVSS score of 7.7.