In the Linux kernel media test driver vidtv, a NULL pointer dereference in vidtv_mux_push_si occurs when a PID context that should have been created is missing. The function later accesses the continuity counter through a null pointer, resulting in a general protection fault that crashes the kernel. This crash is a denial‑of‑service condition that can affect system stability and, in some circumstances, provide a foothold for privilege escalation if the attacker can influence the kernel prior to or during the fault.

All Linux kernel versions that include the vidtv test driver in the media subsystem are affected, as the vulnerability exists in the driver’s source code across the kernel tree until the patch is applied. Both upstream stable kernels and distribution kernels that ship the vidtv driver without the fix are susceptible; the specific patch commits are listed in the references.

The EPSS score is reported as < 1% and the vulnerability is not listed in the CISA KEV catalogue, indicating a low probability of targeted exploitation. Exploitation would require an attacker to deliver crafted MPEG‑TS data to the vidtv driver, meaning the driver must be loaded and the attacker must have sufficient local or privileged access to interact with it. The likely attack vector is local or privileged, and the resulting kernel crash can disrupt services and possibly aid privilege escalation if the fault is leveraged on a vulnerable system. These conclusions are inferred from the available information; the exact attack surface details are not explicitly documented in the CVE entry.