The aw96103 IIO driver in the Linux kernel parses a firmware header that defines the length of the binary payload. If a firmware image is truncated or the length field contains an underflow, the driver reads beyond the end of the copied buffer, producing an out‑of‑bounds read that can expose kernel memory. This behaviour can be exploited to obtain sensitive data from the kernel space.

Any Linux kernel that ships the aw96103 proximity sensor driver and has not integrated the length‑validation patch is vulnerable. Systems that load firmware for the aw96103 device—such as embedded boards, mobile devices or laptops—are affected until a kernel update containing the fix is applied. No specific versions are listed, so all kernels lacking the patch should be treated as vulnerable.

The vulnerability has a CVSS score of 4.4, indicating moderate severity. The EPSS score is less than 1%, suggesting a low probability of exploitation. It is not listed in the CISA KEV catalog, meaning no widespread exploitation is known. Exploitation typically requires the ability to supply a crafted firmware image to the driver, which normally demands local access. Based on the description, it is inferred that this requires local or privileged access to the device firmware loading mechanism.