The NXP SAR ADC driver in the Linux kernel exposes a sysfs attribute named sampling_frequency. Writing a zero, negative, or too small value causes the driver to perform a division by zero or an unsigned integer underflow, corrupting kernel state and potentially triggering a crash. The resulting denial of service can bring the entire system down, as the kernel panics. This is a classic division‑by‑zero weakness.

Any system running a Linux kernel that ships the nxp‑sar‑adc driver and has not yet incorporated the upstream patch is affected. This includes all mainstream distributions, embedded systems, and custom kernels that contain the original driver code. No specific kernel releases are listed, so all builds lacking the fix are potentially vulnerable.

The CVSS score of 5.5 classifies the issue as moderate severity, while an EPSS score of <1% indicates a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The attack requires local write access to the sampling_frequency sysfs file, which is normally restricted to privileged users. Therefore, the risk is moderate; a trusted local attacker could trigger a crash, but remote exploitation is unlikely.