The vulnerability is a NULL pointer dereference that occurs in the Linux kernel's team networking driver during a mode change. The race condition allows concurrent packet transmission while the driver resets its operation pointers, causing a kernel crash. The crash results in a loss of availability for all network services running on the affected host, effectively denying service to users and applications. The weakness is a classic concurrency bug that results in an unguarded dereference of a null function pointer.

Any installation of the Linux kernel that includes the traditional team networking driver is vulnerable. The issue exists in kernel versions prior to the patch commit referenced in the bug report and is fixed in newer kernel releases that employ per‑field updates instead of clearing the entire ops structure. No specific version list is provided, so all kernels that have not yet applied the commit are affected.

The flaw requires an attacker to have CAP_NET_ADMIN privileges to initiate a mode change and to cause network traffic to be transmitted at the same time, which typically implies a local or elevated user. While the exploitation window is narrow, the impact is significant because a single NULL dereference brings the entire kernel down. The EPSS score is less than 1% and the CVSS score is 5.5, indicating a moderate severity; the vulnerability is not listed in the CISA KEV catalog. The risk remains mainly to administrators who can change network team modes while traffic is flowing, especially in environments where unauthorized users may obtain network configuration capabilities.