A null‑pointer dereference occurs when kthread_stop() is called with an ERR_PTR value during the ring‑buffer self‑test. The crash triggers a kernel panic, halting the system. The flaw is a classic Null Pointer Dereference issue that prevents the kernel from booting normally, causing a denial of service for that instance of the system.

The vulnerability affects all Linux kernel implementations that include the test_ringbuffer logic in the late_initcall path before the v3ea2fd3 commit. Versions of the kernel that were released prior to this patch, such as 7.2.0‑rc6 and earlier releases that contain the failing test, are vulnerable. The change applies to the core kernel, so any distribution running an affected kernel version is impacted.

The flaw has no known remote exploitation route; it can only be triggered during kernel initialization, meaning an attacker would need local access or a malicious kernel build. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting a low to moderate likelihood of active exploitation. Nevertheless, a kernel crash is a high‑severity denial of service that can bring services down or require a reboot. The CVSS score is not provided, but the impact is significant enough that any system running an affected kernel should apply the fix immediately.