Impact
The ks8851 network driver contains a deadlock condition that arises when its interrupt handler re‑enables bottom halves while holding a spinlock and a TX queue has been awakened; this causes a pending softirq to attempt to acquire the same lock and trigger a deadlock, leading to a kernel lock‑up. The vulnerability is a result of improper disabling of bottom halves (BH) around critical sections in the ISR and related TX paths, as captured by the CWE identifier 821. The kernel failure manifests as a denial of all network services on the affected system.
Affected Systems
All Linux kernel builds that include the ks8851 driver are affected, regardless of whether the CONFIG_PREEMPT_RT option is enabled. No specific kernel version is listed, so any build that compiles this driver should be considered vulnerable.
Risk and Exploitability
The CVSS base score is 7.5, the EPSS probability is below 1% and the vulnerability is not listed in the CISA KEV catalog. The deadlock can be triggered when a TX packet is queued and a received packet is processed concurrently, leading to a kernel lock‑up that manifests as a denial of network services. The description does not specify whether the attacker requires local or remote access or any particular privilege level, but achieving the fault would involve delivering traffic that exercises both the TX and RX paths of the ks8851 driver. Because the EPSS low probability and lack of known exploitation, the immediate risk is limited, yet a local system with active ks8851 traffic could be affected if the unpatched driver is in use.
OpenCVE Enrichment