The vulnerability arises from an error pointer dereference in the sun4i DRM backend. The function drm_atomic_get_plane_state can return an error pointer, but the driver does not check this, leading to a potential kernel crash or denial of service when malicious or malformed data triggers this code path. This is a classic null pointer dereference flaw (CWE‑476) that can destabilize the kernel.

The affected component is the sun4i DRM backend, part of the Linux kernel for Allwinner SoCs. Vendors that ship Linux kernels with this driver (including many embedded systems and custom distributions) may be impacted. No specific kernel version numbers are listed in the advisory, so any kernel containing this code path before the fix is potentially vulnerable.

The CVSS score is not provided, and no EPSS is available, but the flaw can cause a kernel panic, leading to service disruption. The attack likely requires local privilege or access to the DRM subsystem to trigger the problematic call. There is no KEV listing and no known public exploits yet, but the nature of the bug means a local attacker could obtain a DoS. The patch is embedded in the kernel tree but there is no official release noted; administrators should seek the latest kernel that contains the fix.