In Linux kernels, non‑null‑terminated strings supplied to the debugging formatter caused memory reads beyond the allocated slab. The strings originate from NFC LLCP services or netlink attributes and are logged with the %s specifier. This triggers KASAN slab‑out‑of‑bounds reads and can expose kernel data in logs or cause a kernel fault, potentially allowing an attacker to glean sensitive information. The flaw is a classic out‑of‑bounds read and does not directly corrupt memory but reveals internal state.

The vulnerability affects all Linux kernel builds that include the llcp subsystem before the patch was applied. Any distribution using an unpatched kernel version contains this flaw. Users of Linux kernels not yet updated to a version that incorporates the fix are at risk.

The CVSS score of 5.3 indicates a moderate severity. The mechanics require kernel‑level debugging output and manipulation of NFC LLCP messages or netlink data, suggesting a local or privileged attacker could trigger the scenario. Because kernel memory is read, the exploitation surface could yield confidential information, exposing the attacker to a moderate–high risk. EPSS score is <1% and the flaw is not listed in the CISA KEV catalog, so it is not confirmed to be actively exploited in the wild, yet the potential impact warrants prompt remediation.