A NULL dereference occurs when the kernel attempts to set a validation flag on an uninitialized structure in the s390/ctcm subsystem, leading to a kernel crash. This results in a denial of service, potentially causing the system to become unavailable or requiring a reboot to recover.

The affected product is the Linux kernel running on s390 hardware. Specific kernel versions are not enumerated in the data, but any kernel that contains the vulnerable mpc_validate_xid() implementation and has not yet been updated with the commit referenced in the Git links is vulnerable.

The exploit requires privileged code execution or the ability to influence the s390 channel pairings; it is not remotely exploitable from user space. The EPSS score is not available and the vulnerability is not listed in CISA KEV, indicating limited commercial exploitation. Without a public exploit and with a local‑privilege requirement, the risk is moderate to high for environments where the affected kernel runs and receives no patch.