The vulnerability is a NULL pointer dereference that occurs when the Linux kernel's ACPI event handler processes certain address space dispatches. It was uncovered along a missed execution path and has been fixed by adding a defensive check. The flaw causes the kernel to attempt to read or write through a null reference, resulting in a crash and a denial of service for the affected system.

This issue affects the Linux kernel across all operating systems that include the vulnerable ACPI driver code. While the CVE list does not specify individual releases, any kernel version before the patch is potentially vulnerable, so all recent kernels before the update remain at risk.

The CVSS score of 5.5 and the EPSS score are not available, indicating that official severity metrics are incomplete. The CVE description does not provide details about how the fault can be triggered or what input would cause the dereference. Consequently, the attack vector is not explicitly defined in the provided information, and any assessment of exploitation likelihood must remain uncertain. The vulnerability is not listed in the CISA KEV catalog.