A missing check in the Linux media ccs driver can cause a division by zero when calculating the maximum scaling factor, which in turn may trigger a kernel panic and lead to a denial of service for the affected system. The flaw stems from an arithmetic error caused by an unchecked MIN_X_OUTPUT_SIZE register value, and does not provide a direct remote code execution path.

The vulnerability is present in the Linux kernel, specifically within the media subsystem's ccs scaler configuration. It applies to all kernel releases that include the vulnerable media driver prior to the patch, as identified by the vendor "Linux:Linux". No specific version numbers are listed in the CNA data, so all upstream kernels that compile this module are potentially affected.

The CVSS score is 5.5 and the EPSS score is <1%; the issue is not listed in CISA's KEV catalog. Exploitation would require local access to load or manipulate the media driver, likely requiring elevated privileges. Given the lack of a publicly identified remote attack vector, the risk is primarily a local denial of service with a low to moderate likelihood of exploitation under normal operating conditions.