The saa7164 device setup routine in the Linux kernel media subsystem does not verify the return value of ioremap when mapping PCI device BAR0 or BAR2. If either mapping fails, the code continues to use the resulting null pointer, which can cause a kernel crash due to a null pointer dereference, a weakness identified as CWE-252.

Any Linux system that loads the saa7164 media driver and is running a kernel version that lacks the recent patch adding NULL-check logic is vulnerable. Distributions shipping kernels before the commit identified in the references are at risk; updating to a kernel version that includes the fix removes the vulnerability.

The flaw is not listed in CISA KEV and the EPSS score is less than 1%, indicating that large‑scale exploitation has not been recorded and the probability of exploitation is low. However the CVSS score of 5.5 classifies it as a moderate‑severity local vulnerability. Based on the description, it is inferred that an attacker must have local or privileged access to trigger the saa7164 driver initialization, after which the unchecked return value could be exploited to bring the kernel down, resulting in a denial of service. The vulnerability exhibits characteristics of CWE-252 and CWE-476 and keeping the kernel patched is the recommended mitigations.