The tps65219 regulator driver in the Linux kernel left the irq_data.rdev field uninitialized after a helper function was removed. When regulator_notifier_call_chain() is called from the IRQ handler, the uninitialized rdev leads to undefined behavior that causes an internal error and kernel Oops. Because the crash terminates the kernel, it results in a denial‑of‑service interruption of the affected system.

All Linux kernel builds that include the tps65219 regulator driver before the application of commit 64a6b577490c are vulnerable. This includes all official releases and pre‑release kernel 7.1 release candidates (rc1‑rc4) enumerated in the CPE list as well as any other custom or development kernels that ship the unpatched driver.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% and the absence from the CISA KEV catalog suggest a very low likelihood of exploitation. Attacking the kernel would require triggering the IRQ associated with the tps65219 driver; the attacker would then cause a kernel panic and reboot, effectively denying service. Because the flaw stems from an uninitialized field, it is limited to systems that load the affected driver and does not allow arbitrary code execution or data exfiltration.