The ASoC Intel AVS driver contains a bug where it accesses the init_configs array using indices derived from the config_ids array. When an index equal to or larger than the number of init configurations is used, the driver performs an out‑of‑bounds read of the init_configs array. This out‑of‑bounds access could expose arbitrary kernel memory contents. The flaw is a classic bounds‑check bypass classified as CWE‑125 and cannot be directly used to execute code, but it can reveal sensitive kernel data.

Any Linux kernel build that includes the ASoC Intel AVS driver and has not incorporated the three kernel commits referenced in the advisory patches is affected. No specific kernel release numbers are listed; the fix applies to all builds prior to those commit snapshots.

The CVSS score of 5.5 indicates moderate severity. The EPSS score of less than 1% suggests a very low probability of exploitation in the near term, and the vulnerability is not listed in the CISA KEV catalog, meaning no publicly known exploits exist. Exploitation would require an attacker to supply a malicious config ID to the AVS subsystem, which may occur through user‑space device interfaces or firmware interactions. Since no public exploitation has been reported, the likelihood of a targeted attacker successfully leaking memory is considered low, but the risk remains moderate due to the potential for information disclosure and possible kernel instability.