Impact
The vulnerability is a potential division‑by‑zero error in the Linux kernel’s rtw89 Wi‑Fi driver when processing beacon frames whose interval field is zero. If an attacker can cause the driver to encounter a zero beacon interval during beacon tracking, the driver’s calculation that divides by this value can abort the kernel, leading to a crash and a loss of system availability. The upstream patch assigns a default interval of 100 time units when the reported interval is zero, thereby preventing the fault and restoring normal operation.
Affected Systems
This issue affects Linux kernel builds that include the rtw89 driver for Realtek 8xxN series Wi‑Fi adapters. The CNA record lists the generic Linux kernel, and the patch reference indicates it applies to all kernel versions that ship the driver. Because no specific kernel release or firmware revision is given, any kernel that loads the rtw89 module and has not applied the fix may be vulnerable.
Risk and Exploitability
The CVSS score of 5.5 indicates a medium impact, while the EPSS score of less than 1% suggests a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, so there are no confirmed public exploits as of the current data. An attacker would need to be within transmission range of the machine and able to manipulate or spoof beacon frames, a scenario that could occur in a Wi‑Fi environment or via a rogue access point. Consequently, the risk is moderate but should be mitigated promptly to avoid a system crash.
OpenCVE Enrichment