A bug in the Linux kernel's regulator driver for the TPS65224 hardware caused the driver to incorrectly report four linear ranges while only two entries exist. The linear range helpers loop over the reported count, causing a read past the array bounds during adapter initialization. This out‑of‑bounds read can result in invalid voltage constraints being applied, potentially leading to a kernel panic or incorrect regulator configuration. The weakness is a classic buffer over‑read (CWE‑125). The impact is local; it does not provide remote code execution but can cause denial of service or hardware malfunction.

All Linux kernel users that include the TPS65224 BUCK2, BUCK3 and BUCK4 regulator descriptors are affected. This includes devices that load the tps65224 regulator driver during boot or normal operation. No specific kernel versions are listed, so any kernel that still contains the unpatched driver code is impacted.

The vulnerability is not listed in CISA's KEV catalog. The CVSS score of 4.4 indicates a medium severity, and the EPSS score of <1% indicates a very low probability of exploitation. The likely attack vector is local hardware initialization—an attacker with physical or privileged access to the device would need to trigger a power cycle or reload the kernel module to exercise the bug. While the risk of a fatal crash exists, the opportunity for remote exploitation is not apparent, making the overall risk moderate and confined to affected installations.