The vulnerability is an infinite loop in the security module bn_lib.C of the coolsnowwolf/lede firmware. The loop contains an unreachable exit condition, causing the executing process to hang indefinitely. An attacker can trigger the loop by sending crafted traffic to the driver, leading to service disruption or resource exhaustion. This weakness is classified as CWE‑835.

The flaw affects all installations of coolsnowwolf/lede up to and including version r25.10.1; the exact boundary is inferred from the description, which states the vulnerability is present "through r25.10.1". The version range is not explicitly enumerated in the vendor’s advisories. This inference is based solely on the stated wording.

The CVSS score of 9.2 indicates a high severity denial‑of‑service vulnerability. The EPSS score of less than 1% shows that the likelihood of active exploitation is low but not zero. The vulnerability is not listed in the CISA KEV catalog, meaning no documented exploits are currently known. Based on the description, it is inferred that the attacker’s attack vector requires interaction with the affected Wi‑Fi driver, likely through network traffic or local privileged operations, to trigger the infinite loop. Successful exploitation would cause the driver to consume CPU resources indefinitely, potentially crashing the system or degrading overall performance.