The vulnerability arises from an unguarded kzalloc call in the drm/msm/a6xx driver, specifically in the a8xx_hfi_send_perf_table function. When the allocation fails, the returned pointer is dereferenced without a null check, potentially causing a null pointer dereference that triggers a kernel panic. This results in a denial of service that can affect system availability but does not provide a direct vector for code execution or privilege escalation. The flaw is essentially a defensive coding oversight rather than a logical attack surface.

Linux kernel implementations that include the msm a6xx DRM driver and have not yet been updated to a release containing the patch. No specific version numbers are enumerated in the advisory, so all kernel releases preceding the fix are considered affected until the patch is applied.

The CVSS score of 5.5 reflects a moderate severity that primarily impacts system availability, aligning with the nature of a kernel crash. The EPSS score indicates a very low exploitation probability (<1%), and the vulnerability is not listed in the CISA KEV catalog. The flaw remains a kernel‑space bug; based on its nature local access to the affected system, making it unlikely to be exploited remotely. The low EPSS score suggests limited bleed to a loss of service if exploited continuously.