A race condition in the Linux kernel networking bridge code allows concurrent modification of the forwarding database (FDB) entry destination pointer, causing readers to observe inconsistent values and eventually dereference a NULL pointer. The flaw results in a kernel crash, effectively denying service to local processes that trigger the sysfs "brforward_read" path. This vulnerability is a classic NULL pointer dereference, consistent with CWE-476.

The flaw affects the Linux kernel in all releases that did not include the patch; the specific affected versions are not enumerated in the available data, but any kernel prior to the update that introduces the stable FDB snapshot will be vulnerable. All architectures using the bridge subsystem remain in scope.

The local attack vector requires a privileged user or a process with the ability to write to the sysfs bridge interface, making the vulnerability local but significant. The EPSS score is not provided, and the issue is not listed in CISA KEV. Nonetheless, the severity is high, as an attacker can reliably crash the kernel and disrupt system availability. Exploitation does not appear to require sophisticated conditions beyond local access; thus the risk remains elevated until the kernel is updated.