The vulnerability resides in the power‑accelerated AMD XDNA driver within the Linux kernel. An ioctl call (AMDXDNA_EXEC_CMD) unconditionally invokes the cmd_submit callback even when the target device does not provide it. For AIE4 SR‑IOV virtual‑function devices, this callback is absent, causing a NULL function‑pointer dereference that leads the kernel to oops and crash. This results in a denial of service and can destabilise the entire system. The weakness is a classic NULL pointer dereference (CWE‑476).

All Linux kernels that include the amdxdna driver before the patch—essentially any publicly released kernel with the amdxdna/accel module. Affected devices include AIE4 SR‑IOV virtual functions for which the cmd_submit operation is missing. No specific version numbers are supplied, so all current kernel releases are potentially impacted until the fix is applied.

The vulnerability is local to systems that allow a user to invoke the AMDXDNA_EXEC_CMD ioctl on a supported device node. An attacker with kernel‑level or privileged user access can send a malformed command, triggering the NULL dereference and causing the system to crash. The EPSS score is not available, and the vulnerability is not listed in CISA KEV yet, but the nature of the flaw—unprotected kernel crash—implies high severity (CVSS likely around 9). The lack of a public exploit does not diminish the risk if a local attacker can gain access. Immediate patching is recommended to mitigate the availability impact.