In the Linux kernel, the ov5647 camera driver incorrectly calls a function to retrieve device data before the device data structure has been initialized, leading to a segmentation fault when an error condition occurs. This results in a kernel crash, causing a complete system denial of service without providing any remote attack surface. The weakness is a classic improper initialization problem that allows the system to dereference an uninitialized pointer.

The vulnerability affects the Linux kernel in all distributions where the ov5647 driver is compiled. No specific kernel versions are listed, so all current kernels that include the driver are potentially impacted until a patched version is available.

The CVSS score is 5.5, indicating moderate severity, and the EPSS score is <1%, reflecting a low likelihood of exploitation. The lack of listing in CISA KEV suggests no public exploitation. Exploitation would require local or physical access to a machine with the ov5647 camera module, and the attack vector is inferred to be local. Given the potential for a kernel crash, the vulnerability should be treated with high priority.