In the Linux kernel, the ov5647 camera driver incorrectly calls a function to retrieve device data before the device data structure has been initialized, leading to a segmentation fault when an error condition occurs. This results in a kernel crash, causing a complete system denial of service without providing any remote attack surface. The weakness is a classic improper initialization problem that allows the system to dereference an uninitialized pointer.

The vulnerability affects the Linux kernel in all distributions where the ov5647 driver is compiled. No specific kernel versions are listed, so all current kernels that include the driver are potentially impacted until a patched version is available.

The CVSS score is not provided, and the EPSS score is unavailable, but the absence of a known exploit in the CISA KEV database suggests the risk is moderate. Exploitation would require local or physical access to the machine hosting the ov5647 camera module to trigger the probe, and the attack vector is inferred to be local. Given the potential for a kernel crash, the vulnerability should be treated with high priority.