A race condition exists in the Linux kernel’s intel‑hid ACPI notify handler where concurrent tablet‑mode events can register the same input device twice, creating duplicate sysfs entries and eventually causing a null pointer dereference. This flaw results in a kernel crash, disrupting system availability. The vulnerability does not provide a path to execute code or gain privileges beyond the crash.

Linux kernels running on x86 architectures that include the intel‑hid driver, especially on convertibles or detachable devices identified with DMI chassis types 31 and 32. Kernel releases prior to the mutex protection commit are potentially vulnerable.

The CVSS score and EPSS data are not available, and the flaw is not listed in the CISA KEV catalog, indicating no publicly known exploits. Nonetheless, the risk remains high because an attacker able to trigger tablet‑mode ACPI events locally can force the race condition and cause the kernel to crash. The attack vector is therefore local, relying on manipulation of ACPI notifications or triggering tablet‑mode switches to exploit the vulnerability.