In the Linux kernel, a NULL pointer dereference occurs in the Synaptics RMI4 transport drivers when the system enters suspend or resume and the driver module has failed to bind to the device. The code attempts to access driver data that is not present, causing a General Protection Fault during lock acquisition, which precipitates a kernel panic. This results in a denial of service and potential loss of system state.

All Linux kernel builds that include the Synaptics RMI4 transport drivers (such as rmi_i2c and rmi_spi) before the patch that guards against unbound devices are vulnerable. The specific kernel versions are not listed, so any kernel that still uses the affected driver code and has not applied the commit that adds the check could be impacted.

The CVSS score of 5.5 indicates a medium severity, reflecting the potential impact of a kernel panic but balanced against the limited exploitability. EPSS remains < 1%, and the flaw is not in CISA’s KEV catalog. Exploitation would require the attacker to trigger a suspend or resume event on a device whose driver failed to bind, implying local or privileged execution. The absence of exploit data suggests remote exploitation is unlikely, but a compromised privileged user could use this flaw to crash the system.