In the Linux kernel’s Rockchip DRM driver for Analogix DP displays, a missing error check allows the driver to dereference a NULL pointer returned by platform_get_resource(). When the memory resource is unavailable, the unconditionally used pointer causes a kernel panic, leading to a denial of service on the affected system.

The vulnerability affects any Linux kernel installation that includes the analogix_dp module within the Rockchip DRM stack. Devices that rely on Analogix DP output on Rockchip SoCs may be impacted. Because the advisory does not specify exact kernel versions, any kernel tree with the unpatched driver should be considered vulnerable.

The EPSS score is < 1% and the CVSS score is 4.1, indicating a moderate severity level. The issue is not listed in the CISA KEV catalog. Exploitation would require configuring the system or boot process so that the Analogix DP driver cannot obtain the expected memory resource, potentially via a crafted device tree or by disabling the resource. The missing NULL check leads to a kernel panic, causing a denial of service. With no public exploitation reported, the risk remains moderate until a patched kernel is deployed.