The 6pack hamradio driver in the Linux kernel contains an uninitialized‑value bug: while scanning the TTY error flags buffer the loop fails to advance the data pointer and passes corrupted bytes to the sixpack_decode() function. Because the TTY layer does not guarantee that a byte marked with an error flag holds usable data, the decoder receives garbage values. This leads to KMSAN reports of uninitialized reads. The CVE description does not note a crash, but such uninitialized reads can cause kernel memory corruption or kernel instability, potentially resulting in a denial‑of‑service if an attacker crafts a malicious hamradio packet.

The vulnerability is located in the Linux kernel hamradio 6pack networking driver. All kernel releases that include the sixpack_receive_buf path before the commit references listed in the advisory are affected. No specific version numbers are provided by the CNA; administrators should verify that their running kernel contains the patch commit hashes shown in the references.

No public CVSS or EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation would require a specially crafted hamradio packet that reaches the uninitialized‑value code path in the driver. Given the lack of publicly known exploits and the need for the attacker to send data to the hamradio interface, the likelihood of exploitation appears limited; however, the impact could be kernel instability or denial‑of‑service if the bug is successfully triggered.