In the Linux kernel's ARM SCMI firmware component, the SENSOR_UPDATE notification lacks proper size validation. The parser uses the sensor description to determine the expected number of readings, but it fails to verify that the received payload contains those entries before parsing them. This omission allows the kernel to read beyond the end of the supplied payload, potentially exposing kernel memory contents and leading to information disclosure. The error corresponds to improper input validation and may result in data leakage without facilitating remote code execution.

Affected systems include any Linux kernel that incorporates the SCMI firmware handler without the fix. The vulnerability applies to all variants of the Linux kernel, as indicated by the generic CPE string. No specific version ranges are listed, so all unpatched kernels are considered affected until a patch is applied.

Risk assessment shows that while the CVSS and EPSS scores are unavailable, the vulnerability resides in kernel firmware and can be triggered by malicious firmware sent over the SCMI bus. Exploitation would require an attacker with the ability to send crafted SENSOR_UPDATE packets, typically implying physical or privileged access to the device. The lack of a KEV listing suggests limited public exploitation evidence, but given the kernel context the potential impact remains significant for systems that accept untrusted firmware.