The Linux kernel framebuffer driver ssd1307fb initiates synchronous I2C transfers while executing damage callbacks from console printk when preemption is disabled. Because the transfer occurs in an atomic context it attempts to schedule, which is forbidden and triggers a scheduling‑while‑atomic bug that causes a kernel crash. The fault offers no code‑execution path, and the impact is limited to service disruption.

The flaw exists in any Linux kernel build that includes and loads the ssd1307fb framebuffer module. Boards such as the Rockchip RK3566 that use this driver (e.g., kernel 6.6.0-rc5-rockchip-rk356x) will crash when framebuffer damage occurs. Systems that do not load the driver or that use a different display driver remain unaffected.

The CVSS score of 5.5 indicates moderate severity. The EPSS score is listed as <1%, reflecting a very low but non‑zero chance of exploitation. The vulnerability is not in the CISA KEV catalog, and no public exploits are known. The likely attack vector is local: an attacker or privileged user capable of generating console output or otherwise triggering a framebuffer update could exploit the defect and force a kernel reboot. Remote exploitation is not possible; the impact is strictly an availability loss.