A NULL pointer dereference occurs in the emac device driver’s probe function when an interrupt arrives before the device’s memory region is mapped. The driver calls devm_request_irq() too early, causing the interrupt handler to access a NULL pointer (dev->emacp) and triggering a kernel panic. The crash results in a denial‑of‑service condition, potentially affecting system availability but does not grant remote code execution or privilege escalation.

All Linux kernel versions that contain the vulnerable emac driver before the commit that applies the patch referenced by the supplied Git links. The CNA lists the affected product simply as Linux kernel; no specific release numbers are provided, so any kernel version containing the bug before the fix is considered vulnerable.

The vulnerability is local and requires an interrupt on the affected device. It is inferred that an attacker with local or privileged access could trigger the interrupt to cause a crash. The EPSS score is < 1%, indicating a very low but non‑zero exploitation probability, and the vulnerability is not listed in CISA KEV, so no known public exploitation exists. The CVSS score of 7.5 reflects high severity for a kernel panic, but the precise risk level remains uncertain due to the lack of a confirmed exploit.