The Linux kernel’s graphics driver contains a flaw that does not explicitly validate the minimum and maximum vertical frequency values supplied via EDID for variable refresh rate (VRR). If an attacker supplies a zero min_vfreq, a division operation in intel_vrr_compute_vmax() will trigger a divide‑by‑zero error, potentially causing the kernel to panic. This flaw manifests as a denial of service that results in a system crash and loss of availability. The weakness corresponds to a divide‑by‑zero bug, captured by CWE‑254.

The issue exists in the Linux kernel, affecting all versions prior to the inclusion of the fix referenced by commit 1765cf59f517b02f3b0591fe5120930d08bddeb6. Vendors distributing kernels that include this bug, including the mainline Linux distribution kernels, are affected. No specific product or patchlevel is enumerated in the CVE data beyond the generic Linux kernel.

While the CVSS score is not listed, the division‑by‑zero bug can lead to a kernel panic, indicating a high severity impact. The EPSS score is not available, and the vulnerability is not included in the CISA KEV catalog. The likely attack vector is local or privileged, inferred from the need to provide malformed EDID data to the graphics driver; however, the CVE description does not explicitly state how an attacker could supply such data. Given the potential to crash the system, this vulnerability is considered high risk for affected installations.