In the Linux kernel, the flaw resides in the Intel i915 graphics driver: when a GFP_ATOMIC allocation fails and leaves the node pointer NULL, a reference derived from that NULL pointer is returned. The subsequent use of this reference results in a null‑pointer dereference that can crash the kernel. Based on the description, it is inferred that an attacker who can trigger this failure—such as by creating and destroying GPU contexts to induce memory pressure—may achieve local privilege escalation or a denial‑of‑service. The weakness is a missing null‑pointer check, classified as CWE‑476.

All Linux kernel builds that include the i915 driver prior to incorporating commit 6029bc064f0b1bac184203a50fbaaf070fa18832 are affected. The CPE entry indicates that the issue applies to the Linux kernel as a whole; the vendor or distribution is only indirectly specified through the kernel version they ship.

The CVSS score of 5.5 reflects medium severity, and the EPSS score of less than 1% suggests a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires locally executing code capable of provoking a memory‑allocation failure in the graphics driver, but the potential for privilege escalation or kernel interruption warrants prompt remediation.