A NULL pointer dereference occurs in the AMD graphics driver’s dcn401_init_hw() function when the update_bw_bounding_box() callback is unexpectedly NULL. The missing validation can cause the kernel to invoke a null function pointer during hardware initialization, which typically results in a kernel panic. The flaw is a classic invalid pointer usage, classified as CWE-476.

The vulnerability exists in the Linux kernel’s AMD display driver for kernel versions that include the dcn401_init_hw() path, specifically kernel 6.12 and the 7.0 release candidates up through rc6. All builds containing the affected code without the upstream patch are susceptible.

Because the defect is in kernel space, exploitation would require local privileges or a way to manipulate the device so that the update path is entered. The CVSS score of 5.5 indicates medium severity, and the EPSS score of less than 1% reflects a very low likelihood of exploitation. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that an attacker could trigger the flaw by performing operations that change display frequencies, but no confirmed exploitation vector is documented.