The virt_wifi network‑device driver associates its dev.parent pointer with a lower‑level device via SET_NETDEV_DEV during initialization; when a virt_wifi device unregisters while an ethtool operation is in progress, the parent pointer can reference freed memory. This use‑after‑free can corrupt kernel memory, potentially leading to crashes or undefined behavior. The description does not confirm that an attacker can achieve arbitrary code execution; the primary effect is memory corruption and instability.

All Linux kernel releases that include the virt_wifi driver before the commit that removes the SET_NETDEV_DEV call are vulnerable. No precise version range is provided, so any kernel containing virt_wifi without that fix is considered affected until the patch is applied.

The CVSS score of 7.8 indicates high severity. Exploitation would require local or privileged access to control a virtual Wi‑Fi interface and issue ethtool commands while the interface is being torn down, implying a non‑trivial attack vector. The EPSS score of <1% reflects a very low likelihood of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Consequently, the risk is high until a patch is applied, but the probability of widespread exploitation remains low.