The ADE9000 driver for the Linux kernel registers a divider clock with a null address when a clock output is requested. During clock registration, the common clock framework calls a function that dereferences this address, resulting in a kernel crash. This bug does not compromise confidentiality or integrity but can render the system non‑operational when the affected device is probed. The issue manifests when the ADE9000 is configured as a clock provider with an external input clock; the driver avoids this path when using its internal clock, so the crash only occurs for the external configuration.

All Linux kernel releases that include the ADE9000 driver before the patch from commit 134aa31a8d4e71f6ab1d155ad7b4502508832f72, 49ee1c6a3ebda6b7de06b2961b0e09c1c3fe536a, or d2400175228fbc10b29c49a7b5f70a7e80d144dd. The vulnerability applies to the ADE9000 ADC driver within the IIO subsystem and affects any system that loads this driver and exposes the device as a clock provider with an external clock source.

The CVSS score is 4.4 and the EPSS score is <1%, indicating a low probability of exploitation. The vulnerability is a kernel bug that leads to a crash, so an attacker would need to trigger the device probe with an external clock input to cause denial of service. Either local access to the kernel or remote exploitation through a driver that communicates with the ADE9000 may enable this. The vulnerability is not listed in the CISA KEV catalog, suggesting no known large-scale exploitation, but the impact remains significant if the affected device is present.