A defect in the powerVR graphics driver within the Linux kernel allows a benign map failure to propagate incorrectly from the pvr_mmu_map_sgl() function to pvr_mmu_map(), causing the driver to continue execution and subsequently dereference a NULL pointer. This results in a kernel panic (NULL pointer dereference at address 0x0000000000000008). The crash can be triggered through typical driver interfaces such as ioctl calls that exercise the mapping routines, potentially allowing an attacker with local user privileges to crash the kernel, resulting in a denial of service.

The vulnerability manifests in Linux kernels that load the Imagination powerVR driver module. The issue is present in all kernel releases where the driver is included, as the CPE string indicates a general Linux kernel environment with the powerVR driver. No specific version range is listed, but any kernel containing the affected pvr_mmu_map_sgl() and pvr_mmu_map() is potentially impacted.

The CVSS score is 5.5, indicating moderate severity. Kernel crashes are typically considered high severity due to potential denials of service or privilege escalation. The EPSS score is < 1%, indicating a low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, implying it has not been confirmed as exploited in the wild. The likely attack vector is local: a user can trigger the fault by invoking privileged driver operations that trigger the mapping path. An attacker with local access could cause a kernel panic; remote exploitation would require local code execution to interact with the driver.