The Linux kernel bitland-mifs-wmi driver registers two WMI devices: a control device and an event device. During the probe phase, the event device handling path returns early without initializing the platform profile device pointer (data->pp_dev), leaving it NULL. Power management sleep operations are registered globally and triggered for both devices. When suspending, the event device calls bitland_mifs_wmi_suspend(), which passes the NULL data->pp_dev to laptop_profile_get(), leading to a NULL pointer dereference inside dev_get_drvdata(). This causes a kernel Oops and interrupts the suspend sequence. The vulnerability was fixed by adding checks for data->pp_dev validity in suspend and resume callbacks, skipping profile operations when the pointer is NULL.

This vulnerability can cause a kernel Oops (crash) during suspend operations on affected Linux systems, halting the suspend sequence and potentially impacting system stability and availability. There is no indication of privilege escalation or code execution from the provided data.

A fix has been implemented that adds validity checks for the platform profile device pointer in the suspend and resume callbacks of the bitland-mifs-wmi driver. Users should apply the official Linux kernel updates that include this fix once available. Patch status is not yet confirmed — check the vendor advisory or Linux kernel release notes for current remediation guidance.