The vulnerability stems from missing package limit checks in ACPICA parser functions within the Linux kernel, resulting in out‑of‑bounds memory access when processing ACPI tables. A malicious ACPI payload can corrupt kernel memory or overwrite crucial data structures, allowing an attacker to execute arbitrary code or gain elevated privileges in kernel mode. The short‑term consequence is a severe loss of integrity and confidentiality, and a potential denial of service if the kernel crashes. This flaw is a classic out‑of‑bounds access problem that can be leveraged to subvert system security.

All Linux systems running kernel versions that contain the unpatched ACPICA code are affected. The vulnerability was addressed in commits that introduced package limit checks, which can be identified via the provided Git references. Users should check the kernel release notes to confirm whether their current kernel includes the fixes for this issue.

There is no EPSS score available, and the flaw is not listed in the CISA KEV catalog, indicating no current public exploits or exploitation evidence. However, the high impact of kernel memory corruption makes this a top‑tier vulnerability from a theoretical standpoint. Attackers would likely need to supply a crafted ACPI table, which could occur through a compromised BIOS, firmware update, or physical access to the machine. Given the absence of publicly disclosed exploits, the practical risk remains elevated due to the critical nature of the flaw, but the likelihood of immediate exploitation is low.