Setting an invalid GPU engine slot and attempting to configure I915_CONTEXT_PARAM_SSEU causes a NULL dereference in the Linux kernel DRM driver. The resulting kernel crash leads to a denial of service, disrupting system operation. The weakness is a classic NULL pointer dereference, classified as CWE‑476.

The flaw exists in the Linux kernel's DRM/i915/gem subsystem, affecting all distributions that ship a kernel version containing the buggy code. No specific version range is listed; the issue is resolved by committing 36eda5b5c2d40da41cc0a5403c26986237cf9e87, so any kernel prior to that commit is vulnerable.

The EPSS score of < 1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, but the CVSS score of 5.5 indicates a moderate severity. The NULL dereference occurs in kernel mode, which means a crash can be triggered by an attacker with access to the graphics subsystem, for example through a malicious application. The likely attack vector is local, requiring interaction with the I915 graphics driver to set an invalid engine slot and apply the SSEU parameter, leading to a kernel crash and a denial of service.