In the Linux kernel’s rtw88 Wi‑Fi driver, the function that locates a PCI upstream bridge can return NULL when the device is connected to a root bus. If the 8821CE wireless card is present on such a topology, the probing routine dereferences this NULL pointer, causing a kernel panic and system reboot. The vulnerability leads only to a loss of availability; it does not disclose data or grant unauthorized control. The impact is a local denial of service that requires the affected hardware to be present in the system.

All Linux kernel installations that include the rtw88 driver and support the 8821CE Wi‑Fi card, prior to the commit that added a NULL check. The issue is present regardless of distribution, as it is a kernel source change. No specific version numbers are supplied, so any kernel build with the vulnerable driver is at risk if the card is installed on a system with no PCI upstream bridge.

The CVSS score of 5.5 and unavailable EPSS score, and the KEV status, suggest a moderate risk of widespread exploitation. Based on the description, it is inferred that the attack vector is local physical access to a system with the 8821CE card on a root bus topology lacking an upstream PCI bridge, so the vector is limited to compromised or poorly configured hardware rather than remote attacks. The lack of a publicly disclosed exploit and the need for specific hardware conditions further reduce the imminent risk, but the impact is still significant for affected devices.