In the Linux kernel’s rtw88 Wi‑Fi driver, the function that locates a PCI upstream bridge can return NULL when the device is connected to a root bus. If the 8821CE wireless card is present on such a topology, the probing routine dereferences this NULL pointer, causing a kernel panic and system reboot. The vulnerability leads only to a loss of availability; it does not disclose data or grant unauthorized control. The impact is a local denial of service that requires the affected hardware to be present in the system.

All Linux kernel installations that include the rtw88 driver and support the 8821CE Wi‑Fi card, prior to the commit that added a NULL check. The issue is present regardless of distribution, as it is a kernel source change. No specific version numbers are supplied, so any kernel build with the vulnerable driver is at risk if the card is installed on a system with no PCI upstream bridge.

The CVSS and EPSS scores are not provided, and the vulnerability is not listed in CISA’s KEV catalogue, suggesting a low likelihood of widespread exploitation. The attack requires physical access to a system that contains the 8821CE card and a PCI topology lacking an upstream bridge, so the vector is limited to compromised or poorly configured hardware rather than remote attacks. The lack of a publicly disclosed exploit and the need for specific hardware conditions further reduce the imminent risk, but the impact is still significant for affected devices.