The vulnerability is located in the Linux kernel’s ACPI parser function acpi_ps_parse_loop, where an incorrect condition check for the AML_ELSE_OP operation allows the parser to access memory beyond the intended bounds. This out‑of‑bounds access can corrupt kernel memory or trigger a fault. An attacker who can influence the ACPI bytecode or tables may exploit the flaw, potentially causing service disruption or, if other weaknesses are present, arbitrary kernel‑mode code execution. The fix corrects the logic to ensure bounds are respected before proceeding.

The flaw affects all Linux kernel releases that have not yet incorporated the ACPICA patch referenced in the advisory commits. Systems running older mainline kernels without these updates are potentially vulnerable until the patch is applied.

No EPSS or CVSS metric is available, but the nature of the out‑of‑bounds access in kernel code indicates a high potential severity. The attack would likely require the ability to supply or modify ACPI tables, which is normally restricted to local privileged users or a compromised firmware environment. While no public exploits are known, the risk is considered moderate to high until the kernel is updated.