The vulnerability is an unsafe read of an uninitialized fragment address in the airoha network driver’s transmission loop. The driver accesses memory during the final iteration of the loop when the fragment data is not yet initialized. Though the read value is not used, the operation is an uninitialized memory read (CWE‑824), which can result in a page fault that may crash the kernel, potentially disrupting the affected system.

Linux kernels that include the airoha driver before patch commit bde34e84 (and the related patches d78c8ab7 and f670fa4b) are vulnerable. Any system using airoha network interfaces with those kernel versions is impacted, regardless of distribution.

The CVSS score of 9.8 indicates a high severity for a denial‑of‑service impact given the possibility of a kernel crash; the EPSS score is below 1 %, suggesting exploitation is unlikely in the wild, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is network‑based: packets processed by the airoha driver may trigger the unsafe read during transmission, leading to a page fault and service disruption. No privilege escalation is implied.