The Linux kernel’s cfg80211 subsystem can crash when the HE/EHT capability configuration is present but the corresponding operational configuration is missing. This inconsistent state leads to an improper assumption in mac80211, resulting in a kernel failure that can disrupt system operation.

The issue affects any Linux system that loads the kernel WiFi stack, regardless of vendor or distribution. No specific kernel release or version was cited in the advisory, so all releases before the fix are potentially vulnerable.

The vulnerability is classified as a kernel crash, providing a local denial of service that could be escalated if an attacker can trigger the crash from user space. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. It is likely that the attacker would need to supply a malformed WiFi configuration or management frame, implying a local or remote attack vector depending on the system’s exposure to wireless traffic.