The vulnerability is an out-of-bounds write to the zone condition array used by the SCSI block driver in the Linux kernel. It occurs when a block device reports more zones than can be represented by a 32‑bit counter; the kernel allocates a smaller array but continues to write beyond its end, corrupting kernel memory. This memory corruption can be exploited to execute arbitrary code with kernel privileges or to crash the system.

All versions of the Linux kernel that include the SCSI block driver prior to the hotfix are affected. No vendor‑specific product names beyond the Linux kernel are impacted, as the flaw resides in core kernel code.

The CVSS score of 6.2 indicates a moderate risk, while the EPSS score of less than 1 % and the absence from the CISA KEV list suggest a low likelihood of widespread exploitation. Adversaries would need to present a malicious block device capable of reporting an oversized zone count, implying a local or physically present attack vector. No public exploits are known, so the threat level remains moderate, but kernel memory corruption carries high inherent risk.