The flaw is a null pointer dereference in the Linux kernel's tracing subsystem. When mmio_pipe_open fails to locate a PCI device, the hiter->dev pointer is assigned NULL. The mmiotrace read() function still dereferences hiter->dev if hiter exists, which can trigger a kernel panic and cause a system crash. This weakness is listed as CWE-476 and results in a denial of service.

The vulnerability affects all Linux kernel builds that have not yet incorporated the upstream patch. Vendors labeled under Linux:Linux that are running kernel versions prior to the fix remain vulnerable. No specific kernel versions are enumerated, so any system with a kernel lacking the patch is at risk.

The EPSS score is < 1% and the vulnerability is not listed in CISA KEV, indicating no confirmed exploit in the wild at the time of publishing. The CVSS score of 4.4 denotes low severity. The flaw resides in kernel code; if an attacker can invoke mmio_pipe_open, the NULL pointer dereference can trigger a kernel panic and cause a system crash. Based on the description, it is inferred that an attacker would need local access to invoke mmio_pipe_open, which would result in denial of service. No public exploit has been documented, but the crash can impact availability.