The EDAC/igen6 driver contains a defect that triggers a warning when the module is unloaded, because the device objects lack a release() routine. The warning suggests a null pointer dereference, which, if it occurs, could result in a kernel crash or system instability. This conclusion is inferred from the description; the report does not explicitly state that a crash occurs, so the impact is presented as potential rather than guaranteed.

The vulnerability affects all Linux kernel versions that include the EDAC/igen6 driver without the upstream fix providing an empty release() routine. No specific version numbers are provided, so any kernel prior to the inclusion of the patch is at risk. The issue is only triggered when the igen6_edac module is loaded and then unloaded.

Exploitation requires high‑privilege operations, such as root or the ability to execute rmmod on the igen6_edac module. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating that no publicly known exploits exist. If an attacker can unload the driver, the kernel’s attempt to call a nonexistent release() function could lead to a crash, resulting in a denial of service. The risk is therefore considered potentially high for a privileged attacker but low for unprivileged users in the absence of a privilege‑elevation vector.