A NULL pointer dereference in the PCI host‑generic driver causes the kernel to crash during enumeration of PCI devices on 32‑bit systems that use the "pci-host-cam-generic" host controller. When the driver fails to set up per‑bus mappings, the first configuration read dereferences a null base address, leading to an oops. The fault results in a system crash and loss of availability for the host machine, but it does not provide remote code execution or information disclosure capabilities.

The flaw affects Linux kernel releases that include the buggy "pci-host-cam-generic" implementation on 32‑bit architectures. The affected code exists in the generic ECAM operations for 32‑bit CAM systems in the kernel source tree; it is not limited to a vendor or distribution, as the vendor name in the CPE is Linux:Linux. Users running a 32‑bit kernel that enumerates PCI buses with the default host controller will experience the crash.

The exploit path is straightforward: boot a 32‑bit Linux system that uses the "pci-host-cam-generic" driver. The first attempt to read device configuration space from any root bus will hit the NULL pointer and crash the kernel, forcing a reboot or yielding an unresponsive state. No network or privileged input is required in the typical case, making the vulnerability easy to trigger locally.