The wave5 media driver in the Linux kernel contains a flaw that causes the kernel to attempt to read hardware registers after the device hardware has been powered down. This occurs during polling mode when a kernel thread triggered by a high‑resolution timer continues to run after the device is unregistered. The faulty order of cleanup triggers a synchronous external abort, resulting in a kernel panic. The impact is a denial of service that crashes the operating system during normal media encoding operations.

All Linux kernel installations that include the wave5 driver before the patch. The vulnerability affects the kernel component labeled "media: chips-media: wave5" and is present across distributions that ship the stock driver code without the bug fix. No specific distribution or kernel version is listed, but any kernel that has not incorporated the recent cleanup order change is impacted.

While the CVSS score of 5.5 indicates moderate severity, the vulnerability can still cause a kernel panic that forces a reboot and interrupts all services. The EPSS score of < 1% suggests a low probability of exploitation in the wild, and the vulnerability is not listed in CISA KEV. The likely attack vector is local, potentially exploitable by users with sufficient privileges to start media processes, and may also be triggered by misbehaving applications. The exploit requires only the presence of the unpatched driver and the execution of media operations that trigger the poll timer.