The Linux kernel's Wi‑Fi subsystem, mac80211_hwsim, contains a typo in the frequency notification for NAN. This mistake causes the code to interpret 5745 MHz as channel 149, while 5475 MHz is an invalid channel. A null pointer dereference occurs in cfg80211_next_nan_dw_notif when the incorrect notification is processed. Based on the description, it is inferred that an attacker capable of triggering the NAN notification could cause the kernel to crash, which would de‑synchronize the operating system and likely lead to a reboot or service outage.

All Linux kernel distributions that include the mac80211_hwsim module and have not yet incorporated the patch found in commit 1251bbdb8f5b2ea86ca9b4268a2e6aa34372ab33. The affected kernel versions are unspecified, so any release containing the buggy code should be considered vulnerable until the fix is applied.

The CVSS base score of 7.0 denotes moderate severity. The EPSS score of less than 1% indicates a low probability of exploitation in the wild, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Based on the description, it is inferred that the exploit would require sending crafted Wi‑Fi frames or otherwise inducing a NAN notification, making the attack vector local to machines with active wireless interfaces that are reachable by the malicious traffic.