The vulnerability originates in the ACPICA subsystem of the Linux kernel, where the function acpi_ut_walk_aml_resources() failed to validate buffer boundaries. The lack of proper bounds checking allows an attacker to write beyond the allocated memory, potentially corrupting kernel data structures or executing arbitrary code. This is a classic buffer overflow flaw, and in compromised scenarios it could provide privilege escalation or denial of service.

Affected systems include any Linux installation that uses the kernel version embedding the vulnerable ACPICA implementation. The vendor is Linux; the product is the Linux kernel. No specific version range is explicitly listed in the data, so any kernel before the application of the mentioned fix may be impacted. Kernel maintainers have published a patch that enhances buffer validation.

Risk assessment indicates the CVSS score is 7.7 and the EPSS score is < 1%. The vulnerability is not currently listed in the CISA KEV catalog, suggesting no widespread public exploits. Nonetheless, buffer overflows in kernel code pose a high severity risk if exposed; the very low EPSS score indicates a low probability of exploitation, but administrators should prioritize remediation because the potential impact remains severe.