The vulnerability resides in the Linux kernel driver for Bitland MIFs WMI and results in a NULL pointer dereference when the system enters suspend state. This dereference occurs inside the driver’s suspend callback because the platform profile device pointer is left uninitialized for the event device. The consequence is a kernel Oops that aborts the suspend sequence and may leave the system in an unstable state. The weakness is a classic null pointer dereference, classified as CWE‑476. This flaw permits local privileges to trigger a denial of service by forcing the system to stop suspending, but it does not directly enable arbitrary code execution.

Affected systems include Linux kernel installations that include the Bitland MIFs WMI driver on x86 platforms and that have not been updated to include the specified commit or later. No specific distribution is singled out; any distribution using the affected kernel version could be impacted. Version information is not explicitly provided, so any installation running the affected driver prior to the patch is potentially affected.

The issue causes a kernel crash; it does not lead to remote code execution. Based on the description, it is inferred that the attacker would typically need local or privileged access to trigger suspend on a system that loads the vulnerable driver. The CVSS score is 5.5, the EPSS score is < 1%, indicating a very low probability of exploitation. Because the flaw causes a denial of service with the potential to destabilize the operating system, it is considered a medium‑impact local vulnerability. The vulnerability is not listed in CISA KEV at this time.