This vulnerability stems from a divide‑by‑zero error in the Linux kernel’s tdfxfb framebuffer driver when the FBIOPUT_VSCREENINFO ioctl is called. The flaw triggers a kernel crash, forcing a reboot or halt, and is classified as CWE‑369.

The flaw exists in the Linux kernel’s fbdev subsystem, specifically the tdfxfb driver. It is present in any kernel that ships the tdfxfb driver and accepts the FBIOPUT_VSCREENINFO ioctl. No exact version range is provided, so all kernels containing that driver are considered affected until patched.

The EPSS score of < 1 % indicates a very low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 5.5 suggests a medium severity: an attacker who can send the offending ioctl, which requires local or privileged access, can force a system crash and thus cause a denial of service. The attack vector is inferred from the need to invoke the vulnerable ioctl on the framebuffer device.