In the Linux kernel, the function ffa_partition_info_get() failed to validate its input and passed a NULL pointer directly to uuid_parse(), causing a memory dereference that resulted in a kernel panic. The outcome of this flaw is an abrupt system halt, effectively denying availability to legitimate users.

The vulnerability exists in the Linux kernel. All distributions running any kernel version that contains the unpatched ffa_partition_info_get() path remain affected. The patch is bundled in the most recent stable kernel releases, so systems with older kernels are at risk. No other vendor products are explicitly listed.

The exploit likelihood is very low, with an EPSS score below 1% and no presence in the CISA KEV catalog. Although the impact of a kernel crash is high, the attack vector is not clearly defined; it likely requires privileged control or the ability to call ffa_partition_info_get() with a NULL UUID. The CVSS score of 5.5 indicates moderate severity. Consequently, the threat level is tempered by the low probability of successful exploitation, but the potential for denial of service remains.