The vulnerability is a null pointer dereference in the SKRoot-linuxKernelRoot project, specifically within the testRoot/jni/utils modules that incorporate cJSON.Cpp. This flaw can allow an attacker, when able to trigger the dereference, to cause a crash of the involved module and consequently disrupt its operation, raising availability concerns.

The SKRoot-linuxKernelRoot repository maintained by abcz316. No explicit version number is listed in the official data, so all current releases that incorporate the vulnerable modules are considered at risk until a fix is applied.

The CVSS score of 8.7 categorizes this flaw as high severity, while the EPSS score indicates a very low but nonzero likelihood of exploitation. It is not listed in the CISA KEV catalog. Based on the description, the vulnerability arises when a null pointer is dereferenced during operation of the testRoot/jni/utils modules that use cJSON.Cpp. An attacker who can trigger that dereference could cause a crash of the module, leading to a denial‑of‑service for the component. The specific conditions required to trigger the fault are not detailed, so the exact attack vector cannot be definitively stated, but it requires interaction with the vulnerable module or provision of malicious input.