A vulnerability in the Linux kernel's ring-buffer subsystem causes a NULL pointer dereference when accessing buffer_meta files for CPUs that never came online. This occurs because buffer_meta files are created for all possible CPUs, but the actual buffer is only allocated when the CPU is online. Attempting to read the file for an offline CPU leads to a NULL dereference. The issue is fixed by failing the open operation with an error code when the CPU has no buffer.