The idxd driver in the Linux kernel contains a flaw that can cause a crash when the event log is disabled. During a Function Level Reset error, the driver attempts to restore an event log that was not allocated because the hardware does not support event logging, leading to a kernel panic. This manifests as a null pointer dereference that the driver fails to guard against, resulting in a loss of system availability requiring a reboot.

Linux kernel builds that include the idxd driver. The specific kernel versions affected are not listed, so any kernel that ships the idxd driver without the recent fix may be vulnerable. The flaw occurs only when the hardware does not support event logging.

The CVSS score of 5.5 reflects a moderate impact, and the EPSS score of < 1% indicates a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the crash is triggered by a Function Level Reset error. It is inferred that an attacker able to induce such an error—likely requiring local or privileged access—could provoke the crash. No remote exploitation or code execution is described in the available data. Because of the low exploitation likelihood and lack of public exploits, the urgency for remediation is moderated, but applying the patch is the definitive mitigation.