The kalmia USB driver in the Linux kernel fails to validate that the device it is probing has the expected number and types of USB endpoints. When a malicious USB device omits the required URBs, the driver later attempts to access these absent endpoints, causing a kernel crash. This results in a local denial of service, affecting system availability, and represents a validation weakness (CWE‑1287).

The vulnerability affects the Linux kernel on all distributions that include the kalmia driver, which is typically compiled into the standard kernel image. No specific version range is listed, so any kernel release prior to the patch that introduces proper endpoint validation is considered vulnerable. The fix is applied to the driver in the kernel source.

The CVSS score of 5.5 indicates medium severity, and the EPSS score of less than 1 % suggests a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. An attacker would need to connect a malicious USB device to the target machine, which could be done via physical or potentially remote means if USB devices are introduced remotely. The exploit delivers a crash but does not provide code execution or privilege escalation.