A race condition exists between the periodic PHC time caching worker in the iavf driver and the adapter reset or disable routines. When the worker runs during teardown, it may access freed memory and lock objects, causing a kernel panic that brings the system down. The result is a local denial of service for all users interacting with the affected network interface.

All Linux kernel builds that contain the iavf driver before the commit that added the patch (7c01dbfc8a1c5f). The vulnerability applies to every distribution that ships an unpatched kernel, because the affected code is part of the core kernel tree. No version range is specified; any kernel with the unpatched code is vulnerable.

The CVSS severity is 7.8 and the EPSS score is <1 %. It is not listed in CISA’s KEV catalog. The exploit requires the attacker to have local privilege to trigger a reset or disable operation on the iavf adapter; this prerequisite is inferred from the description, as the vulnerability is triggered only during those internal driver actions. Without local privileged access, an attacker cannot easily drive the crash. Consequently, the risk is judged low to moderate, but the resulting denial of service warrants prompt remediation.