The Linux kernel mtd intel-dg driver contained a vulnerability where the regions array was accessed before the nregions variable, which counts the array elements, was initialized. This caused an out-of-bounds array access detected by UBSAN at drivers/mtd/devices/mtd_intel_dg.c line 750. Additionally, the code silently ignored ENOMEM errors during initialization, which was corrected. The vulnerability is classified under CWE-129 (Improper Validation of Array Index) and has a CVSS 3.1 vector indicating local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

The vulnerability allows local attackers with low privileges to cause out-of-bounds memory access in the kernel, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. This can result in system crashes, data corruption, or privilege escalation. However, no known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix links are provided, users should monitor vendor communications for updates. Avoid running untrusted code with local access until a fix is applied.