The bug is in the Linux rtw88 Wi‑Fi driver for the 8822b chipset. When a userspace utility calls rtw8822b_set_antenna while the hardware is powered off, the driver proceeds to read RF registers that return unexpected values. This causes a kernel warning in rtw8822b_config_trx_mode, indicating an improper state check. The warning itself does not crash the kernel, but repeated triggering could clutter logs and potentially lead to a denial‑of‑service if the log buffer is exhausted.

All Linux systems that include the rtw88 driver with the 8822b chip are impacted. The issue is visible in kernel 6.17.5‑arch1‑1, as shown in the reported trace, but any kernel version that ships the unpatched rtw88 module is vulnerable. Systems with the chip powered off while userspace can invoke antenna‑configuration commands (e.g., via nl80211) are at risk.

The CVSS score of 5.5 indicates moderate severity. The EPSS value of < 1% suggests a very low likelihood of exploitation in the wild. Attackers would need to be able to run a privileged userspace process that can send nl80211 messages, which is inferred as the trace references nl80211_set_wiphy; such operations usually require administrative network privileges, though this requirement is not explicitly stated in the description. Since the bug only generates warnings and does not provide a direct code‑execution or privilege‑escalation vector, the overall risk is limited. The vulnerability is not currently listed in the CISA KEV catalog.