The Nouveau GSP driver for Linux kernels fails to add the SEC2 falcon entry for GA100 GPUs during initialization. As a result, the device->sec2 pointer remains NULL and a null‑pointer dereference occurs when the GSP‑RM boot sequence accesses it, causing a kernel panic. This flaw is a classic null pointer dereference (CWE‑476) and does not allow an attacker to execute code or exfiltrate data.

All Linux kernel builds containing the Nouveau GPU driver that target GA100 family GPUs are affected. Systems running an unpatched kernel prior to the commit that added the SEC2 table entry are at risk. No specific vendor release numbers are listed, so any kernel version that lacks this patch is potentially vulnerable.

The defect results in a kernel panic that results in a denial‑of‑service outcome; there is no data exposure or elevated privileges. The CVSS score is 4.4 and the EPSS score is less than 1%, indicating a low likelihood of exploitation. The flaw is not listed in the CISA KEV catalog. An attacker would need to trigger the GSP‑RM boot process, for example by interacting with the GPU subsystem, to cause repeated crashes and degrade system availability.