In the Linux kernel, the "ice_tx_dim_work" trace event in the Intel Ethernet "ice" driver records eight scalar values that reference internal ring and dimension structures. After the event is queued, the tracing subsystem later prints the event via TP_printk. Because the referenced pointers can become invalid before printing, the code dereferences a NULL or dangling pointer, resulting in a kernel panic. This is an instance of an invalid pointer dereference that causes a denial of service when the system crashes.

The issue affects any Linux kernel that contains the upstream Intel "ice" Ethernet driver and the associated "ice_tx_dim_work" trace event. Kernels that have not incorporated the patch that copies the scalar values instead of pointer references are vulnerable. The advisory does not list specific version ranges, so any kernel built from sources prior to the fix is potentially impacted. The vendor is the Linux kernel project; no distribution‑specific version information is provided.

The vulnerability’s CVSS score is 5.5 and its EPSS score is less than 1%. It is not listed in CISA’s KEV catalog. Exploitation requires triggering the trace event, which can occur during normal operation of the driver or via crafted network traffic that activates the tracing path. The likely attack vector is inferred to be the internal operation of the network driver and potentially malicious traffic that causes the trace event. A successful trigger will crash the kernel, leading to a system reboot or lock‑up. While the EPSS indicates a very low probability of exploitation, the impact is moderate to high due to the crash. Administrators should treat the vulnerability as a moderate risk and patch promptly.