A NULL pointer dereference occurs in the Linux kernel bnxt_en driver when PCIe error recovery runs on a device that has already been closed. The routine bnxt_io_error_detected() attempts to disable and synchronize interrupts through a mapping function that assumes a valid bp->bnapi pointer, which is NULL on a closed NIC. The dereference leads to a kernel crash, disrupting system stability and availability.

All Linux kernel installations that include the bnxt_en network driver are potentially affected; version details are not specified in the advisory, but the issue exists in pre‑patch kernel releases. Users should verify whether their kernel contains the commit that applies the NULL‑check guard.

The advisory does not list a CVSS score or EPSS value, and the vulnerability is not in the CISA KEV catalog. Because the flaw is triggered during internal PCIe error handling, it is likely exploitable only by a privileged user or through a local attack vector that can induce PCIe errors on a closed Network Interface Card. The main risk is a local denial of service through a forced kernel crash, with no evidence of remote code execution or privilege escalation in the provided description.