The vulnerability stems from calling the page table lookup functions pte_pfn() and pte_dirty() on non‑present page table entries. When these functions are invoked on such entries, as can happen during device‑private migration, the undefined behaviour can lead to a kernel panic or incorrect dirty folio accounting. The primary impact is a denial of service through a system crash, potentially affecting all users of the affected machine.

Linux kernel implementations. No specific affected version information was disclosed; the flaw exists in any kernel build that includes the migrate_vma_collect_pmd() path and does not guard calls to pte_pfn() and pte_dirty() with a pte_present() check.

The CVSS score and EPSS are not available, and the vulnerability is not listed in the CISA KEV catalog. Therefore, the likelihood of exploitation is uncertain. However, because the flaw requires execution of kernel code that can trigger the undefined behaviour, it is reasonably likely that a local attacker or a malicious device driver could provoke a crash. No remote exploit vector is documented, and the problem is expected to be effectively mitigated by applying the upstream kernel patch that adds the missing guard checks.