A divide‑by‑zero error exists in the Linux kernel’s net/sched act_skbedit module that can cause an uncontrollable kernel panic. The bug is triggered when the queue‑mapping range covers all 16‑bit queue identifiers, making the modulus value zero during the hash calculation. Execution of this code path aborts the kernel, which results in a full system reboot or halt, effectively denying service to the host.

All Linux kernel installations that do not contain commit 38a6f0865796 of the upstream kernel are vulnerable. The advisory does not list specific version numbers, so administrators should check whether their kernel includes that commit or a later version that incorporates the same fixes.

The CVSS score of 5.5 categorizes the vulnerability as medium severity. An EPSS score of less than 1% indicates a low probability of exploitation in the wild, and the issue is not included in the CISA KEV catalog. Based on the description, the likely attack vector involves sending traffic that activates the traffic‑class filter to compute a queue‑mapping hash. The precise vector is not explicitly stated, so this inference is tentative; the exposure could be local or remote depending on how the filter is reachable. No privilege escalation or data‑exfiltration paths are documented; the primary consequence is an outage due to a kernel crash.