The vulnerability resides in the Linux kernel bonding driver, where the function bond_debug_rlb_hash_show accesses a slave pointer without validating that it is non‑NULL, which is a NULL dereference (CWE‑476). When the bonding interface has cleared a slave but left an RLB hash‑table entry in the list, the diagnostic function attempts to dereference the NULL pointer, causing a kernel BUG and a system crash. This local crash results in a denial‑of‑service condition where the affected system becomes unresponsive until rebooted, compromising availability but not confidentiality or integrity.

Affected products are Linux kernel releases tracked by the Linux CNA. No specific version range is provided in the data, so all kernel builds that include the bonding driver prior to the fix may be vulnerable.

The CVSS score of 5.5 reflects a moderate severity. The EPSS score of less than 1% indicates a very low probability of exploitation in the wild at the time of analysis. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that attackers would need local privileges to read the debugfs file that triggers bond_debug_rlb_hash_show; the failure cannot be triggered remotely from an unprivileged network user.