Based on the description, it is inferred that the vulnerability originates in the Linux kernel’s soc_button_array handling code, where the field btns_desc->package.count is used as an index into btns_desc->package.elements. The patch adds a check that the count is not zero before accessing package.elements[0]. When this check is missing, supplying a package count of zero causes the kernel to perform an out‑of‑bounds read beyond the bounds of the package.elements array. This read can leak kernel memory contents or trigger a crash, leading to information disclosure or denial of service.

All Linux kernel releases that include the soc_button_array code are potentially affected. The CVE record does not specify a version range, so any kernel version that has not yet incorporated the upstream bounds‑check is vulnerable. Administrators should verify whether the installed kernel includes the patch for this issue or plan to upgrade to a version that contains the fix.

Based on the description, the attack vector is inferred to be local via the soc_button_array interface, which typically requires local access or device interaction. The EPSS score is less than 1% and the vulnerability is not listed in the CISA KEV catalog, indicating that publicly available exploits are not currently known. The CVSS score of 5.5 places the vulnerability in the medium severity range, yet an out‑of‑bounds read in kernel code still constitutes a high‑impact flaw. Attackers would need to invoke the soc_button_array path, which is usually local or device‑specific, so gaining local access or privilege elevation is likely required. Because the flaw can lead to kernel memory disclosure or a crash, it remains a serious concern for systems that expose the soc_button_array interface.