The vulnerability occurs in the rockchip PDM driver within the Linux kernel ASoC subsystem. The function that configures audio formats calls pm_runtime_get_sync() to resume the device, but it ignores the function’s return value. If the runtime resume fails, the driver continues to read and write hardware registers while the device remains unpowered, leading to undefined hardware state and kernel crashes. The description indicates that the flaw can cause an immediate denial of service by destabilizing the kernel.

All Linux kernel releases containing the unchanged rockchip_pdm driver code are potentially affected. The vendor is the Linux kernel itself; no specific version range is enumerated, so any kernel that has not yet incorporated the fix is at risk.

Based on the description, it is inferred that the attack vector is local, as an attacker would need to induce a runtime PM resume failure or trigger the driver to access the device while it is unpowered. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting a low to moderate overall risk. However, the lack of proper error handling can result in kernel instability, so mitigation should be prioritized.