In the Linux kernel's mhi_wwan_mbim driver, a modem can provide a descriptor that points to an offset outside the received buffer. The driver calls skb_copy_bits() to copy the packet data but ignores the function’s return value. When the copy fails, an skbn with uninitialized contents is passed to netif_rx(), which leaks kernel heap memory into the network stack. This flaw is a classic example of improper input validation leading to uncontrolled data flow (CWE‑908).

The vulnerability affects Linux kernel builds that include the mhi_wwan_mbim driver. Specific affected kernel versions are not listed in the CVE data, so users must check whether their current release contains the fix applied in the most recent kernel release.

The EPSS score is below 1 % and the flaw is not listed in the CISA KEV catalog, indicating a low likelihood of exploitation in the wild. An attacker would need control over the modem firmware or physical access to the device to supply malicious descriptors, so the vector is less than remote network adversaries. If exploited, the attacker could gain visibility into kernel heap contents but there is no evidence that this leads to remote code execution or privilege escalation.