The hinic driver in the Linux kernel contains a heap buffer overflow that occurs when the driver processes the last mailbox segment. A payload of 48 bytes is written starting at offset 2016, exceeding the 2048‑byte buffer allocated for received segments by 16 bytes. This corruption of kernel memory can lead to a crash or compromise of system integrity if an attacker can control the mailbox contents; such outcomes are inferred from the description.

Any Linux system running a kernel that includes the hinic driver without the MBOX_LAST_SEG_MAX_LEN check. Exact version information is not specified; the defect exists in kernel configurations prior to the fix committed in recent kernel releases.

The CVSS score is 8.8, and the EPSS score is 0.00142, indicating a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is the ability to send crafted messages to the network interface driven by hinic, which would require either local or remote access to the NIC. Successful exploitation would depend on the attacker’s ability to control the mailbox payload and achieve kernel memory corruption; potential outcomes such as system compromise are inferred.