The reported kernel defect stems from an incomplete cleanup path in dax/kmem initialization and removal routines. When a DAX device partial probe succeeds, the kernel silently treats the failure of later memory region requests as a success, leaving the corresponding resource pointer NULL. Subsequent device removal then attempts to free a non‑existent region, dereferences the NULL pointer, and crashes the kernel. The crash can be induced by any user capable of creating or manipulating DAX devices, potentially leading to a denial of service on the affected machine. The weakness aligns with improper resource management and null pointer dereference (CWE-476).

The vulnerability affects the Linux kernel’s dax/kmem subsystem. No specific kernel release range is listed, so any system running an unpatched Linux kernel that supports DAX memory management could be impacted. The affected vendor is the Linux kernel maintainers, and the vulnerability is present in all kernels prior to the fix commit referenced in the advisory.

The CVSS score is 5.5, EPSS is < 1%, and the vulnerability is not listed in CISA’s KEV catalog, indicating no confirmed widespread exploits. Because the flaw requires the ability to create or control DAX devices, the attack vector is likely local, possibly limited to privileged or low‑privileged users with capability to bind DAX drivers. Nonetheless, a kernel crash can lead to a service interruption and may provide a foothold for further exploitation on systems where the crash can be tuned to elevate privileges. Administrators should treat this as a moderate to high risk until a patch is applied.