A NULL pointer dereference can occur in the Linux kernel s390/dasd driver when the is_ese discipline function pointer is NULL, because the code uses a logical AND to test the pointer before calling it. The patch replaces the AND with an OR to guarantee that the function is only called if it is non‑NULL. A bug of this type can lead to an unexpected kernel crash, which in turn can cause a denial of service for all users on the affected machine.

The issue resides in the s390/dasd driver of the Linux kernel. No specific version range is given in the advisory; the fix is applied to the kernel source code shown in the provided commit logs.

No CVSS score or EPSS score is reported, and the vulnerability is not listed in the CISA KEV catalog. The typical attack vector is local, involving an attacker able to trigger dasd_release_space() operations that exercise the bug. The impact would be a kernel crash rather than remote code execution. The lack of exploitation metrics suggests low likelihood of widespread use, but the potential for a local denial of service exists.