The Linux kernel flaw in the AMD node subsystem allows a potential NULL pointer dereference when the module initializes incorrectly. During a failed initialization, the exported function __amd_smn_rw() may dereference the uninitialized amd_roots pointer, causing a kernel fault that leads to a system crash or reboot. This direct kernel crash represents a denial of service for all users, as it disrupts normal operation of the machine. No evidence in the description points to widespread or remote exploitation, but the deterministic nature of the fault means a local attacker could trigger it reliably.

The issue targets the Linux kernel’s x86/amd_node module and affects all builds that contain the buggy implementation of amd_smn_read/write. The flaw is present in any distribution that uses the unpatched kernel source, regardless of version, as no specific release is excluded by the information provided.

The CVE lists no EPSS score and is not listed in CISA’s KEV catalog, indicating limited publicly known exploitation activity. The vulnerability would require a local user to invoke the exported functions after an initialization failure; because the null dereference occurs deterministically, an attacker with local privileges can reliably cause a kernel crash. The lack of a public exploit does not reduce the severity, as the impact—a system-wide denial of service—remains significant.