The Cadence cdns‑mhdp8546 graphics bridge driver in the Linux kernel contains a flaw that can cause a null pointer dereference during the atomic_enable() phase of mode‑setting. The driver attempts to access a mutex through a connector pointer that has not yet been initialized, leading to a kernel panic that crashes the system or interrupts graphical services. Based on the description, it is inferred that the bug is internal to the driver and does not involve external input, making it a local kernel issue.

This vulnerability affects Linux kernel builds that include the Cadence cdns‑mhdp8546 driver without the patch that sets the connector pointer earlier in atomic_enable(). All kernels containing this unpatched driver are potentially vulnerable; the issue is independent of vendor or distribution specifics beyond the presence of the driver.

The CVSS score of 5.5 indicates medium severity. The EPSS score of < 1% suggests a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that exploitation requires a mode‑setting failure that triggers the driver’s recovery path, implying a local attack vector. An attacker who can induce such failures could cause a kernel crash, but the path does not provide code execution or data exfiltration.