A NULL pointer dereference occurs in the Linux kernel Classmate laptop driver when sysfs attributes are accessed before the driver’s input device data is fully initialized. The fault leads to a kernel crash (oops) because a dev_get_drvdata call returns NULL and the code continues without a check. This is a classic CWE‑476 vulnerability and can be triggered by reading or writing the exposed sysfs entries before the driver’s internal data is ready.

The flaw affects the Linux kernel, specifically the Classmate laptop driver. Versions 2.6.33 (all RC releases) and 6.19 RC1‑RC8 are listed as impacted. Any kernel containing the legacy classmate‑laptop module without the NULL‑check patch is susceptible.

The CVSS score is 5.5, indicating moderate severity. The EPSS score is under 1 %, implying the attack probability is very low. The vulnerability is not present in CISA’s KEV list. The likely attack vector is a local escalation or privileged local user who can trigger the sysfs attributes on a system running an affected kernel. Exploitation requires the attacker to interact with the sysfs interface before the driver is fully initialized, causing a kernel crash that can result in loss of service.