Impact
In the Linux kernel, the comedi_parport driver can trigger a general protection fault when an interrupt occurs before the driver’s required subdevices are allocated. The interrupt handler accesses uninitialized state, causing a kernel crash. This produces a system‑wide denial of service. The weakness stems from improper initialization and a potential race condition in the driver code.
Affected Systems
All Linux kernel installations that compile the comedi_parport driver, regardless of distribution or kernel version, are vulnerable. Any system that has not yet applied the upstream fix may crash when a parallel port interrupt is triggered, either by real hardware or emulated input.
Risk and Exploitability
The CVSS score of 4.4 classifies this vulnerability as moderate. The EPSS score is less than 1%, and it is not listed in the CISA KEV catalog, indicating limited known exploitation. Based on the description, it is inferred that exploitation would likely require local privileged access or the ability to trigger a parallel port interrupt. Although no public exploits are known, the vulnerability can cause a system‑wide denial of service if the comedi_parport driver is loaded and a parallel hardware interrupt occurs.
OpenCVE Enrichment
Debian DLA