The ks8851 network driver can deadlock the Linux kernel when an interrupt handler and an outgoing packet are processed while a TX queue is awakened. If the PREEMPT_RT scheduler is enabled or a packet is received concurrently, the driver re‑enables bottom halves before the lock held by ks8851_irq() is released. The re‑enabled softirq schedules a transmission path that attempts to acquire the same spinlock, causing a deadlock and a kernel lock‑up that halts network processing, representing a denial‑of‑service impact on the system's network functionality.

All Linux kernel builds that include the ks8851 driver are affected, regardless of whether CONFIG_PREEMPT_RT is enabled. The vulnerability is present in the kernel's network stack at the ISR level and is not limited to a particular kernel version based on the available information, so any system running the ks8851 driver—commonly on embedded or network devices—may experience the issue.

The CVSS score or EPSS is not provided, and KEV does not list the vulnerability, indicating it has not been exploited in the wild so far. Nevertheless, a deadlock can be provoked deliberately by generating concurrent TX and RX traffic to a device that uses the ks8851 driver, especially under PREEMPT_RT. Attackers could use this to destabilize the kernel, making it an infrastructure denial of service risk. Because the failure mechanism relies on normal driver operation, the attack does not require elevated privileges and is therefore a local exploit with kernel mode execution potential.