The flaw is a null pointer dereference in the drm/amd/pm driver that arises during RAS initialization when the System Management Unit (SMU) is disabled. If triggered, the kernel will crash, resulting in a denial of service condition for the host system. The exploit is confined to the kernel space and does not directly grant arbitrary code execution, but a crash can be leveraged by an attacker who can force the vulnerable state to affect system availability.

The vulnerability applies to all Linux kernel releases that include the drm/amd/pm driver with SMU handling. The vendor is Linux, and the affected builds are not restricted to a particular kernel version; any kernel that loads the driver while SMU support is disabled may be susceptible.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1% points to a very low probability of exploitation in the wild. The issue is not listed in CISA’s KEV catalog. Exploitation would likely require local privileged access to the machine or the ability to disable SMU support, making it a hardware‑dependent, local attack vector.