Enabling the GICv4 virtual interrupt controller on a system that lacks an ITS node causes the driver to advertise virtual local interrupts even though the necessary hardware is missing. During domain initialization the code dereferences a NULL gic_domain pointer, causing a kernel panic and a reboot. The fault is a classic null pointer dereference that disrupts normal operation but does not allow arbitrary code execution.

The vulnerability exists in the Linux kernel on any KVM‑based ARM system configured with GICv4 while the host does not provide an ITS device tree node. It is triggered by setting the module option kvm-arm.vgic_v4_enable=1 and is present in kernel configurations that compile the gic‑v4 driver. The issue appears in kernel releases prior to the commit that disables VLPIs when no ITS is detected, including in the 7.1.0 kernel series.

Because the fault requires enabling the kernel module option on an ARM system that lacks ITS support, the attack surface is limited to environments where an attacker can modify kernel parameters or install a vulnerable kernel. No public exploits or remote vectors are known, and the vulnerability is not listed in CISA's KEV catalog. The CVSS score is 4.7, indicating moderate severity. The EPSS score of < 1% suggests a low likelihood of exploitation, given the need for privileged configuration changes.