The Linux kernel contains a flaw in the imx8qm-hsio driver where the refclk_pad pointer is set to NULL if the 'fsl,refclk-pad-mode' property is missing in the device tree. Later, this pointer is dereferenced during configuration, leading to a NULL pointer dereference that can crash the kernel and deny service. This provides a local denial‑of‑service vector rather than complete remote code execution.

The vulnerability affects Linux kernel deployments that include the Freescale i.MX8QM HSIO PHY driver. Specific kernel versions are not enumerated in the advisory, so all builds prior to the patch that contain this driver are potentially vulnerable. No product or vendor versions are listed beyond the generic Linux kernel.

The exploitability details are not quantified; EPSS data is unavailable and KEV has not listed this issue. The attack vector is inferred to be local, requiring a malicious or improperly configured device tree that loads the affected driver. Because the error manifests during probe time, an attacker would need to trigger the driver load, perhaps by providing a crafted device tree node or manipulating kernel boot parameters. The lack of public exploits suggests the risk is moderate for environments that load the driver, but unpatched systems remain vulnerable to accidental crashes caused by missing device tree properties.