A flaw in the Linux kernel’s x86 platform UV driver causes a panic when a socket is deconfigured, because the socket is mapped to the special value SOCK_EMPTY (0xffff). During allocation of UV hub information structures this mapping leads to an invalid reference, triggering a kernel crash. The result is a system‑wide denial of service, as the kernel stops responding after the panic. The weakness matches CWE‑386, typically indicating an issue with incorrect handling of values leading to errors such as panics.

Hardware sockets running the Linux kernel that include the x86/UV platform are affected. No specific kernel release numbers are listed; any kernel build that implements the vulnerable UV driver before the fix is potentially impacted. Operators should verify whether their current kernel version contains the fix from the listed kernel commit references.

With a CVSS score of 5.5 the vulnerability presents a moderate risk. The EPSS score is below 1 % and the issue is not listed in CISA’s KEV catalog, so the likelihood of exploitation is low. Likely attack vectors would require local access or the ability to force a deconfiguration of a UV socket, though the exact method is not detailed in the advisory. The impact remains availability‑only, causing a crash rather than data compromise.