A NULL pointer dereference occurs in the emac device driver’s probe function when an interrupt arrives before the device’s memory region is mapped. The driver calls devm_request_irq() too early, causing the interrupt handler to access a NULL pointer (dev->emacp) and triggering a kernel panic. The crash results in a denial‑of‑service condition, potentially affecting system availability but does not grant remote code execution or privilege escalation as described in the CVE data.

All Linux kernel releases that include the vulnerable emac driver prior to the patch referenced by the commit links. The CNA lists the affected product simply as Linux kernel; no specific release numbers are provided, so any kernel version containing the bug before the fix is deemed vulnerable.

The vulnerability is local and requires the device driver to handle an interrupt. While the CVE description does not specify an attack vector, it is inferred that an attacker with local or privileged access could trigger the interrupt to cause a crash. The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, indicating no known public exploitation. The severity, based on the impact of a kernel panic, is considered high, but without an exploit score or path the precise risk level remains uncertain.