The vulnerability arises from a missing bounds check in the accel/qaic resp_worker function, allowing a maliciously crafted wire message from a connected device to trigger an out‑of‑bounds read. The read can access beyond the allocated slab, potentially causing memory corruption, infinite loops or a kernel panic. The main consequence for the system is a denial of service through kernel crash, which also disrupts all running processes and can lead to data loss or instability.

The vulnerability affects the Linux kernel across all distributions that include the accel/qaic driver. No specific kernel version or distribution was listed in the CNA data; therefore any installation that uses the accel/qaic interface should be considered vulnerable until the kernel is updated to incorporate the commit that restores the bounds checking.

No CVSS score or EPSS value is provided, and the vulnerability is not listed in the CISA KEV catalog, indicating that no widespread exploitation has been reported. The flaw requires a device to send a malformed wire message, so the threat surface is limited to environments where the attacker can control or compromise the relevant hardware. Despite the limited attack vector, a kernel panic can still have serious availability implications, making an update a prudent mitigation step.