The vulnerability arises from missing validation of the byte_count value in the acpi_ps_get_next_package_length function within the Linux kernel. This oversight can cause the kernel to read or write beyond the bounds of a buffer when processing ACPI tables, potentially leading to arbitrary kernel memory corruption. Such corruption may enable a local attacker with sufficient privileges to execute arbitrary code at the kernel level, or could cause a system crash if not exploited. The weakness identified aligns with improper input validation and out‑of‑bounds access flaws.

The flaw exists in the Linux kernel source and therefore affects all Linux distributions that ship the kernel without the remediation. No specific affected version range is provided, so any kernel older than the revision containing the fix is potentially vulnerable.

No EPSS score is available and the issue is not listed in CISA KEV, indicating no documented active exploitation. However, the nature of the bug—kernel memory corruption—means that a local attacker with ability to provide crafted ACPI tables could potentially exploit it. The CVSS score is not specified, but the theoretical impact includes privilege escalation and service disruption. Without a publicly known exploit, the risk remains primarily theoretical until the vulnerability is actively leveraged.