This defect in the DRM AMD display driver arises from treating the optional stream->sink pointer as if it always references a valid object. The lack of a null check leads to a dereference that can cause a kernel panic when a DPMS (Display Power Management Signalling) sequence is executed. The resulting crash terminates all user processes and may leave the system unusable until it is rebooted, representing a classic denial‑of‑service condition that can be triggered locally by any user controlling the graphics subsystem.

All Linux kernel releases that contain the AMD DRM display driver are affected until the security update is applied. The issue involves the kernel module handling DPMS for AMD GPUs, so systems with AMD graphics hardware running recent or older kernel versions are potentially vulnerable. No specific version numbers are listed, but the patch commit is present in downstream stable kernels of current distributions.

The EPSS score of < 1% and the vulnerability not listed in the CISA KEV catalog indicate limited data on exploitation frequency. The CVSS score of 5.5 indicates moderate severity due to the null‑pointer dereference in kernel space, which would lead to a system crash. The likely attack vector is local or remote generation of a DPMS sequence via a graphics application or driver interface, so any user with rights to invoke DPMS on a system with an AMD GPU could trigger the flaw. The absence of a known exploit reduces the immediate threat, but the potential for a denial‑of‑service remains.