In the Linux kernel, the cx23885 media driver lacked a check on the return value of pci_ioremap_bar(), which could cause a null pointer dereference during device initialization. If the kernel module attempted to map a PCI region that failed, the driver would dereference a null pointer, potentially causing a kernel panic or crash, exposing the system to a denial‑of‑service condition and offering an escape for privilege escalation.

The vulnerability impacts the Linux kernel’s media driver for the cx23885 device. All Linux kernel releases before the patch that added the ioremap return check are affected. The specific version range is not detailed in the advisory, so any kernel containing the unpatched cx23885 driver may be vulnerable.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, which limits precise exploitation probability assessment. Nevertheless, the flaw requires a PCI device that uses the cx23885 driver and a local or remote ability to probe the device, making the attack vector local. An attacker can trigger the flaw by inserting or probing the device, leading to a kernel fault. After the patch, the driver cleanly releases resources and returns an error code, removing the vulnerability.