In the Imagination PowerVR driver, an incorrect value passed through a debugfs entry when updating the ftrace mask caused a null pointer dereference, triggering a kernel Oops and system crash. The fault occurs in the function that sets the trace mask and results in a kernel panic. This vulnerability is categorized as a null pointer dereference (CWE‑476).

The flaw is present in Linux kernels that include the Imagination PowerVR DRM driver before the patch commit, affecting all distributions that ship such kernels. No specific kernel version is singled out, so any release with the driver should be considered at risk.

No CVSS or EPSS scores are publicly available, and the vulnerability is not listed in CISA KEV. Exploitation requires privileged access to write to a debugfs attribute, which is typically granted to root users. Once that permission is obtained, an attacker can trigger a kernel crash, leading to local denial of service. No documented remote exploitation or automatic exploitation chain exists.