In the Intel IPU6 media driver, an error pointer is incorrectly dereferenced during the probe routine. This null‑pointer dereference can lead to a kernel fault and cause the system to crash or halt, resulting in a denial‑of‑service condition. The flaw is a classic pointer misuse vulnerability as identified by the commit message and Smatch warning.

All Linux kernel releases that contain the intel/ipu6 media driver but have not yet incorporated the patch fixing the dereference. Because no specific kernel version range is provided, any build with the driver before the commit is likely affected.

The CVSS score of 5.5 indicates moderate severity, and EPSS is unavailable, so exploitation likelihood remains uncertain. The vulnerability is not listed in the CISA KEV catalog, indicating no publicly cited exploits. The attack vector is likely limited to a local or privileged context, inferred from the fact that the driver operates during device initialization. No additional information about remote exploitation is present in the CVE data.