In the Linux kernel, the fbnic driver contains a race condition between the mailbox handler that writes to the firmware log and the teardown routine that frees this log. If the handler performs a write while the removal routine has already freed the log structure, the code may dereference a freed or NULL pointer, resulting in a failed assertion, kernel crash, or other instability. The flaw is a use‑after‑free data race, identified as CWE‑416. No other direct security impact is documented in the CVE description.

Any system running a Linux kernel that includes the fbnic driver before the commit that patches the race is affected. The vendor information indicates that the vulnerability applies to all Linux distributions that ship the standard kernel. The specific affected kernel versions are not listed, so any kernel versions that have not yet incorporated the referenced patch are at risk.

The CVE does not provide an exploit and the EPSS score is unavailable. The vulnerability is not listed in the CISA KEV catalog. Exploitation would require local kernel interaction with the fbnic driver, typically involving privileged or root access to trigger concurrent mailbox and removal events. Because the flaw can lead to a kernel panic or process crash, the risk is primarily a denial of service and potential instability rather than immediate privilege escalation. System administrators should treat it as a high‑priority issue for kernels that depend on fbnic.