In the Linux kernel, the OMAP SSI driver grabs an HSI controller through hsi_alloc_controller(), which bypasses the usual device initialization path. As a result, the embedded struct device lacks a DMA mask. Recent DMA API hardening changes mandate a valid dma_mask for dma_map_sg() and related helpers. Without this mask, attempts to map DMA buffers can cause a kernel crash or generate warnings, which aligns with CWE‑665 and CWE‑909 weaknesses. The impact is a local denial‑of‑service through a kernel crash that occurs when the driver performs a DMA operation.

This issue is present in every Linux kernel build that includes the OMAP SSI driver, regardless of distribution. No specific version range is cited; the vulnerability exists in any kernel that applies the hardening changes to the DMA API and has the driver compiled. Therefore all vendors that ship the OMAP SSI driver before the patch are affected.

The CVSS score of 4.1 indicates medium severity, while the EPSS score of <1% suggests a low likelihood of exploitation, and it is not listed in CISA's KEV catalog. The attack vector is inferred from the description, as the exploit requires a local attacker to trigger the SSI driver’s DMA mapping operation, which typically demands local kernel code execution or control over driver state. This means the vulnerability does not expose an immediate remote attack surface but could be used for local denial‑of‑service or privilege escalation if the conditions are met.