The vulnerability originates in the ACPICA subsystem of the Linux kernel, where the function acpi_ut_walk_aml_resources() failed to validate buffer boundaries. The lack of proper bounds checking allows an attacker to write beyond the allocated memory, potentially corrupting kernel data structures or executing arbitrary code. This is a classic buffer overflow flaw, and in compromised scenarios it could provide privilege escalation or denial of service.

Affected systems include any Linux installation that uses the kernel version embedding the vulnerable ACPICA implementation. The vendor is Linux; the product is the Linux kernel. No specific version range is explicitly listed in the data, so any kernel before the application of the mentioned fix may be impacted. Kernel maintainers have published a patch that enhances buffer validation.

Risk assessment indicates that the CVSS score is 7.7 and the EPSS score is unavailable. The vulnerability is not currently listed in the CISA KEV catalog, suggesting that no publicly known exploit is in widespread use. However, buffer overflows in kernel code present a high severity risk if exposed; thus the likelihood remains a concern until a patch is applied. Without the availability of exploitation metrics, administrators should treat this flaw as a serious risk and prioritize remediation.