The bug in the Linux kernel HID appletb‑kbd driver causes a sleeping mutex lock to be invoked from interrupt contexts, triggering a "BUG: sleeping function called from invalid context" message that can lead to a kernel panic and loss of availability. This flaw is a classic example of CWE‑413. The kernel panic effectively denies service to any user on the affected system.

Linux kernel releases that include the appletb‑kbd driver for Apple Touch Bar devices are vulnerable. The issue existed in all kernels prior to the workqueue‑based fix that moved the offending calls into process context. Systems running MacBook Pro models with a Touch Bar are the most likely to be affected; newer kernels that incorporate the remediation are not susceptible.

EPSS score of <1% indicates a very low likelihood of exploitation, and the vulnerability is not listed in CISA KEV. The CVSS score of 5.5 indicates medium severity impact. Based on the description, it is inferred that an attacker would need local access to the machine to trigger activity that engages the inactivity timer or reset paths, providing the necessary context to exploit the bug. The conditions required for exploitation are relatively narrow—hardware events from the Touch Bar—so while the potential impact is high, the overall likelihood of a successful exploit remains low.