The Linux media driver dm1105 incorrectly ignores the return value of dma_alloc_coherent during initialization. If the allocation fails, the driver continues with a NULL DMA pointer, resulting in an invalid memory operation that triggers a kernel oops. This leads to an internal kernel crash, providing a local denial‑of‑service vector. No remote execution or data exfiltration is described, and the vulnerability requires the ability to load or reload the driver, implying a privilege‑elevated or local attacker context.

This issue affects all Linux kernel releases that include the dm1105 media driver before the patch is applied. No specific version range is listed, so all kernels that compile this driver without the fix are potentially vulnerable.

Because the exploit requires either root privileges or the ability to load a kernel module, the attack vector is local. The CVSS score of 5.5 indicates a moderate impact, reflecting the local nature of the vulnerability. The EPSS score is < 1%, showing a very low but nonzero exploitation probability. The vulnerability is not listed in CISA’s KEV catalog, so no current known exploits are reported. The primary risk is operational disruption rather than confidentiality or integrity compromise.