An integer overflow occurs in the ACPICA implementation of the acpi_ex_opcode_3A_1T_1R function when calculating a truncation length. The overflow can produce a negative size that is passed to memcpy, which may corrupt kernel memory if executed.

The flaw is present in Linux kernel builds that include the ACPICA code before the patch commits referenced in the advisory. All kernels prior to the latest stable release that contains the fix are potentially affected. No specific version ranges are listed, so affected systems are those running unpatched Linux kernels.

The CVSS severity score is 8.4. The EPSS score is below 1%, indicating a very low exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. The code path that triggers the overflow processes ACPI tables supplied by firmware. The likely attack vector is the supply of a malformed ACPI table or malicious firmware that is processed by the kernel, which is inferred from the context of the vulnerable function. Precise exploitation feasibility and impact remain uncertain without explicit metrics.