The flaw, a NULL pointer dereference (CWE-763), occurs when the module is unloaded on generation 4 hardware. The cleanup code incorrectly calls vsp1_drm_cleanup instead of vsp1_vspx_cleanup, triggering a kernel oops that crashes the system. This results in a denial-of-service outcome for the affected host.

The vulnerability affects any Linux system whose kernel includes the Renesas VSP1 media driver before the fix. Distributions that have released kernels without the patch, or custom-built kernels, are at risk.

The flaw is a NULL pointer dereference (CWE-763) that is triggered by attempting to unload the vsp1 module. Based on the description, it is inferred that root privilege or the ability to load/unload kernel modules is required to trigger the vulnerability. No EPSS score is available, and the issue is not in the CISA KEV list, so no public exploitation data exists. The impact is limited to privileged users who can unload the module; unprivileged users cannot directly exploit the vulnerability.