The vulnerability is a data‑race caused by a static rx_result variable in the ieee80211_invoke_fast_rx function. Because the rx_result is shared among concurrent callers, one packet’s result can overwrite another’s before it is acted on. This can cause a packet that should be queued or dropped to slip through into the wrong receive path, or a packet that should be processed to be discarded. The behavior may lead to incorrect data delivery or service interruption, but it does not grant code execution or arbitrary memory manipulation.

All Linux kernel releases that include the mac80211 wireless stack are affected. The issue does not list specific kernel versions, so any build that has not applied the commit that removes the static keyword is vulnerable.

The CVSS score of 8.8 indicates a high severity vulnerability. The EPSS score is less than 1%, implying a low likelihood of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. While the bug can degrade WiFi service quality or allow a crafted packet to bypass normal processing, no public exploitation has been reported. The likely attack vector would require an attacker to send specially crafted frames to a system with an active WiFi interface, suggesting the risk is moderate at best but mitigation is recommended.