The octeon_ep_vf receive function fails to check the return value of napi_build_skb(); when the network stack passes a packet to the driver, the helper can return NULL on an allocation failure. The driver then dereferences this pointer without validation, causing a kernel null pointer dereference that crashes the system. This flaw directly compromises kernel stability.

The vulnerability resides in the octeon_ep_vf driver that ships with the mainline Linux kernel. Any distribution that includes this driver for Octeon EP virtual functions is affected. Vulnerable kernel builds are those that do not include the patch referenced in the commit logs; specific version numbers are not listed but all pre‑patch releases carry the flaw.

Although no CVSS or EPSS score is publicly available and the flaw is not listed in CISA KEV, a NULL pointer dereference that leads to a kernel crash is inherently exploitable. An attacker who can send crafted packets to the octeon_ep_vf NIC can trigger the crash without privileged access. The lack of mitigations in affected kernels places the risk at moderate to high, especially for remotely managed systems that may have these virtual functions exposed.