During a warm reset flow, the Intel ISHTP HID driver in the Linux kernel can dereference a NULL pointer when the cl->device pointer is unset while clients are still being enumerated. This leads to an immediate kernel panic, abruptly bringing the system to a halt. The flaw is a classic null‑pointer dereference (CWE‑476) resulting in a denial‑of‑service condition that leaves the host inoperable until rebooted.

Any Linux kernel build that contains the Intel ISHTP HID (intel‑ish‑hid) module without the patch is affected. The CVE data do not list specific kernel versions, so all unpatched kernels that compile this module remain vulnerable until the fix is applied.

The CVSS score of 5.5 indicates a medium overall severity, but the direct kernel panic means the impact is high for the affected host. The EPSS score is less than 1% and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited known exploitation. The likely attack vector is a situation where a warm reset is initiated while client enumeration is in progress—this could be triggered by user or system requests for a reboot, or by firmware that initiates resets on hot‑plug events. Exploitation would therefore require privileged or local user capability to trigger such a reset, or a malicious firmware interaction. The consequence is system downtime until recovery.