In the Linux kernel's MTD subsystem, a NULL pointer dereference was possible when a SPI‑NAND device was configured with the "nand‑no‑ecc‑engine" option. The driver set an ecc.engine pointer to NULL but continued to dereference it unconditionally to check for pipelined support, causing an immediate oops during device probing. The resulting kernel crash leads to a denial‑of‑service; a crash can reset the entire system or render services unavailable. The weakness is a classic unchecked NULL pointer dereference (CWE‑476).

All Linux kernel builds that include the MTD SPI‑NAND driver and use a device tree entry with nand‑no‑ecc‑engine set are affected. The vulnerability is not limited to a specific kernel version; any release that compiles this driver without the patch in the committed commits (c/3c765fd..., etc.) may be vulnerable. The kernel family includes Linux:Linux per the CNA list.

The CVSS score is not provided and the EPSS score is unavailable, suggesting no publicly known exploitation. Because the fault occurs during chip probing, an attacker would need local access to trigger the kernel oops, which typically requires privileged or physical access. Without a validated exploit path, the risk is moderate; nevertheless, the crash can be leveraged to exercise denial‑of‑service or to pivot if a privileged user is available. The vulnerability is not listed in CISA's KEV catalog, indicating no known widespread exploitation at the time of analysis.