The vulnerability arises when a virtual function (VF) attempts to read a PF‑restricted register in the Linux kernel’s libwx subsystem. This illegal register access triggers a fault that can cause the system to hang, effectively denying service to all running workloads.

Linux kernel images that include the libwx driver are impacted; the specific affected releases are not listed in the data, so any kernel version that incorporates this code path may be vulnerable.

No CVSS score or EPSS information is provided, and the vulnerability is not listed in CISA’s KEV catalog. The flaw requires the ability to initialize a VF, which implies a privileged context or a poorly secured virtual function environment. Because the attack leads to a system crash rather than data exfiltration, the risk is primarily availability. Without exploit metrics, the likelihood of exploitation is uncertain, but a privileged attacker who can manipulate virtual functions could readily trigger the failure.