The vulnerability arises because the Mediatek DSI DRM driver registers a host before storing its driver data, causing a NULL pointer dereference. When the kernel attempts to bind the driver, it crashes, preventing any subsequent DRM operations and creating a system hang. This results in a denial of service and is a classic example of CWE-476 weakness.

The flaw affects Linux kernels that contain the Mediatek DRM driver, notably kernel 6.9 and all 7.0 release candidates up to rc7. Any system running these kernels with the Mediatek DSI host attached is potentially impacted. The vendor is the Linux kernel project.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of <1% reflects a very low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalogue. The attack vector is likely local: a malicious or improperly configured Mediatek display device can trigger the crash during device probe. Because the crash occurs in kernel space, an attacker with access to such hardware can cause a denial of service without further privileges.