A null pointer dereference can occur in the AMDGPU DRM driver when the SDMA block is not enabled and the buffer_funcs structure is not initialized. This flaw is a classic instance of an uninitialized pointer leading to undefined behavior, which in kernel code can produce instability or a crash.

All Linux kernel builds that include the AMDGPU DRM driver with the SDMA block disabled are potentially affected. Any kernel version that contains the code path prior to the patch that fixes the uninitialized pointer should be regarded as vulnerable. This spans all major distributions that ship the upstream kernel or its derivatives.

The EPSS score is reported as < 1%, indicating a very low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog, implying no known active exploits. The CVSS score of 5.5 denotes moderate severity. Explicit attack vectors, privilege requirements, or remote exploitation capabilities are not detailed in the available data, so the risk assessment relies on the generic moderate severity and low exploitation probability.