The Linux kernel function pinconf_generic_parse_dt_pinmux() assumes a non‑empty 'pinmux' property, but if the property is empty the allocator returns a special value that is not NULL. When the code subsequently dereferences this value, the kernel crashes. This leads to a denial‑of‑service condition allowing an attacker to force a kernel panic. The underlying weakness is a null pointer dereference or use of invalid memory.

Linux kernel implementations are affected. No explicit version range is provided, so all kernel releases that include the pinctrl: pinconf-generic subsystem are potentially impacted until the patch is applied.

Because the vulnerability resides in the kernel, exploitation requires the attacker to trigger a malformed pinmux property, likely via a crafted device tree or custom driver. While no CVSS or EPSS score is available and the flaw is not listed in CISA KEV, the nature of a kernel panic implies a high severity. The attack vector is inferred to be local or via a privileged code path that can supply the malformed property. Prompt patching is recommended to eliminate this risk.