A null pointer dereference occurs in the Linux kernel’s DRM xe HDCP subsystem when the media_gt feature is disabled via configfs and no memory is allocated for it. The function intel_hdcp_gsc_check_status accesses an invalid address, causing a kernel page fault that compromises the entire operating system. The primary impact of the fault is a system kernel crash, resulting in a denial of service and a potential reboot requirement. The vulnerability stems from a lack of NULL checking before dereferencing a pointer (CWE‑476).

All Linux kernel implementations that include the DRM Xe HDCP subsystem and support the media_gt configuration. No specific vendor or version numbers are enumerated in the advisory, but any kernel release containing the drm/xe/hdcp code prior to the patch is potentially vulnerable.

The vulnerability is not listed in CISA’s Known Exploited Vulnerabilities catalog and has a CVSS score of 5.5, with an EPSS score of <1%, indicating limited publicly known exploitation data. The attack vector is inferred to be local, requiring an attacker with the ability to modify configfs entries for the media_gt feature. Since the fault triggers a kernel crash, the effect is high if the configuration can be manipulated, but the lack of remote capabilities and available public exploit reduces immediate risk to systems that enforce strict permission controls on configfs.