This vulnerability involves a NULL pointer dereference in the shim application's dp.c library, specifically in the function is_removable_media_path() when DevicePathToStr() returns NULL. The missing NULL pointer checks can cause the process to crash, leading to denial of service on systems using the shim UEFI bootloader. The vulnerability requires local access with high privileges and has a CVSS v3.1 base score of 3.9 (low severity). Red Hat classifies the impact as moderate due to possible system instability, local denial of service, or corruption of system integrity and availability. The vendor advisory suggests code modifications to include NULL pointer checks as mitigation but does not confirm an official patch or fix release yet.

The vulnerability can cause denial of service by crashing the shim process during UEFI boot, potentially making the system unstable or unavailable. It requires local access with high privileges and does not affect confidentiality. Integrity impact is low, and no remote exploitation or user interaction is needed. There are no known exploits in the wild. The flaw may also corrupt system integrity and availability in some cases.

Red Hat advises modifying the code to include NULL pointer checks in the affected functions to prevent the NULL pointer dereference. Specific code changes include checks before calling DevicePathToStr and verifying pointers before use. No official patch or fix is currently confirmed; users should monitor the Red Hat advisory for updates. Until a fix is released, applying the suggested code-level mitigations can reduce risk.