The vulnerability in the Linux kernel's wm97xx power supply driver arises from a race condition during device initialization. In the probe() function, request_irq() is called before the power_supply handle is allocated and registered. If an interrupt fires in this window, the interrupt handler calls power_supply_changed(), which uses the uninitialized power_supply handle, causing a NULL pointer dereference. The fix involves requesting the IRQ only after the power_supply handle registration, eliminating the race and preventing the NULL pointer dereference.

This vulnerability can cause a denial of service due to a NULL pointer dereference triggered by an interrupt handler accessing an uninitialized pointer. There is no impact on confidentiality or integrity. The CVSS vector indicates local attack complexity is low, privileges required are low, and no user interaction is needed, but the impact is limited to availability (denial of service).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The fix involves reordering the IRQ request to occur after power_supply registration to prevent the race condition. Until a patch is applied, users should monitor vendor advisories for updates.