The kernel p54 firmware parser fails to validate the lengths of component ID and component version records before accessing their data. A malformed firmware record can therefore cause the parser to read past the intended buffer boundaries, potentially leaking sensitive kernel memory or triggering a crash. The vulnerability is specific to the Wi‑Fi driver’s firmware loading logic.

All Linux kernel releases that contain the vulnerable p54 firmware parser implementation are affected. Version information is not specified in the advisory, so any kernel prior to the fix that includes the vulnerable code is vulnerable.

The likely attack vector requires an attacker to supply a maliciously crafted firmware image to the affected Wi‑Fi device; this is inferred from the description that the parser reads firmware records without length checks. The risk is therefore mainly local or demands physical or reset access to inject firmware, as no network‑based exploit path is documented. The EPSS score is not available and the vulnerability is not listed in CISA KEV, indicating a lower exploitation probability; nevertheless, if a high‑risk environment receives unsupervised firmware updates, the potential for information disclosure or a kernel crash could be serious.