The eswifi socket offload driver in Zephyr RTOS copies user-provided payloads into a fixed buffer without checking the available space, causing a classic buffer overflow (CWE-120). This overflow can corrupt kernel memory. Exploitation requires local access with privileges to call the socket send API; remote exploitation is not possible. The vulnerability affects all versions of Zephyr. The CVSS 3.1 vector indicates low attack complexity and privileges required, no user interaction, and impacts confidentiality, integrity, and availability.

Successful exploitation allows local attackers to corrupt kernel memory, potentially leading to privilege escalation, denial of service, or information disclosure within the affected Zephyr RTOS environment. Remote attackers cannot exploit this vulnerability directly. The impact is rated high due to the potential for kernel-level compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid running untrusted local code that can invoke the eswifi socket send API. Monitor Zephyr project advisories for updates and apply patches promptly once available.