A NULL pointer dereference occurs in the function icc_link_nodes within the Qualcomm SM8450 interconnect driver of the Linux kernel. When a destination interconnect pointer is missing during runtime, the driver attempts to read from a zero address, causing an Oops that causes the system to panic. The crash halts all services and requires a reboot, thereby disrupting continuity without disclosing or corrupting data.

All Linux kernel builds that include the SM8450 interconnect driver prior to the commit that introduces the fix are affected. The CPE entries list generic Linux kernels, including kernel 7.0 releases 1 through 6. Devices that rely on the SM8450 platform and its interconnect configuration are at risk until the patch is applied.

The CVSS score of 5.5 indicates a moderate severity. The EPSS score is less than 1%, showing a very low probability of widespread exploitation. The flaw is not listed in CISA KEV. Triggering the vulnerability requires that the driver be probed with an uninitialized link, which can be achieved by supplying a malformed interconnect configuration or by manipulating driver loading. The likely attack vector is local; an attacker with permissions to influence kernel modules or driver initialization can cause the kernel panic. While no public exploit exists, the impact of an unexpected crash is significant for systems requiring high availability.