The kionix kx022a accelerometer driver in the Linux kernel performs a sanity check on an array index derived from a device register value. The check incorrectly accepts the value equal to the array size, allowing an index one beyond the last valid element. This off‑by‑one error corresponds to CWE‑125 and permits an out‑of‑bounds read of kernel memory, which can compromise kernel integrity and potentially crash the system.

Linux kernel releases that contain the kionix‑kx022a input driver are affected. All distributions and derivative kernels that ship this driver unchanged up to the latest patch are vulnerable.

The flaw resides entirely in kernel driver code that is exercised when the device registers are accessed. Attackers would need to provide crafted values to the driver, typically through direct communication with the accelerometer over its bus interface. The CVSS score of 5.5 indicates a moderate severity. The EPSS score of less than 1% reflects a low probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog, so no widespread exploitation has been reported. The out‑of‑bounds read provides a limited avenue to glean sensitive kernel data or destabilize the kernel if the read is part of a larger exploit chain.