The dt2815 driver in the Linux kernel accepts arbitrary I/O port addresses through the COMEDI_DEVCONFIG ioctl. When it attempts to write to an address with no hardware, the outb() operation can trigger a page fault, causing a kernel panic. This defect leads to a denial of service by crashing the kernel. Based on the description, the likely attack vector is a local privileged user or a system that can invoke the ioctl; remote exploitation would require privilege escalation. A denial of service results because the kernel stops responding and typically requires a reboot.

Affected systems are any Linux kernel releases that include the dt2815 Comedi driver before the hardware detection fix was merged. The CPE indicates all variants of the Linux kernel, and no specific patch levels are provided, so any kernel containing the vulnerable code is at risk. If your environment uses a stock kernel or distribution kernel that shipped before the patch, the dt2815 module remains susceptible.

The CVSS score of 4.7 indicates moderate severity. The EPSS score of <1% indicates a low probability of exploitation in typical environments. The vulnerability is not listed in CISA KEV. An attacker with local privileged access or a process that can invoke the COMEDI_DEVCONFIG ioctl can trigger the flaw, causing a kernel panic that results in a denial of service.