In the Linux kernel, the watchdog driver msc313e contained a bug where the probe function failed to set driver data for the platform device. When the system invoked suspend or resume callbacks, dev_get_drvdata returned NULL, leading to a null pointer dereference. The outcome is a kernel crash, resulting in a denial of service. The identified weakness is a null pointer dereference during power‑management callbacks.

This flaw affects the Linux kernel wherever the MSC313E watchdog driver is compiled in. No specific kernel version range is listed; any kernel build including this driver without the patch is vulnerable. The vendor is the Linux kernel project, referenced by the CPE string cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*.

The vulnerability has no publicly available CVSS or EPSS scores, and it is not listed in the CISA KEV catalog. The nature of the flaw suggests that an attacker must have access that can trigger the platform device's suspend or resume callbacks, such as a local privileged user or a scenario that enables a kernel suspend/resume transition. A successful exploit would cause a kernel panic and deny service for the affected node. In absence of a remote execution vector, the risk is primarily limited to environments where privilege escalation or physical access is possible.