The vulnerability is a NULL pointer dereference in the be2net network driver function be_cmd_get_mac_from_list, identified as CWE‑476. When the driver requests a PMAC_ID from firmware while the pmac_id parameter is NULL, the function dereferences the null pointer and can cause the kernel to crash. A crashed kernel results in a denial of service that requires a reboot to recover. The impact is limited to the kernel’s stability and does not directly expose data but prevents affected systems from operating normally.

The bug affects Linux kernel versions 6.19 release candidates 1 through 6, as documented by the corresponding CPE strings. All distributions that ship these kernels without the fix are vulnerable.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1% suggests a very low likelihood of exploitation. The issue is not listed in CISA’s KEV catalog. The attack vector is inferred to be local: an attacker must have the ability to trigger a firmware interaction that causes the driver to call be_cmd_get_mac_from_list with a NULL pmac_id. No known remote exploitation paths are documented.