The vulnerability is a null‑pointer dereference in the mt7615 Wi‑Fi driver when the device is connected via USB or SDIO rather than the expected mmio bus. The driver incorrectly processes the mmio‑only TXRX_NOTIFY event, sending it to a function that cleans up transmit queues. Because the cleanup callback is NULL on non‑mmio buses, a single notification causes a NULL dereference in the RX worker, resulting in a kernel crash. The crash can force a reboot or rendering the system unusable, leading to a denial of service. The bug does not directly provide remote code execution or information disclosure.

The defect appears in the Linux kernel for systems that use a MT7615 Wi‑Fi chipset attached via USB or SDIO. No specific kernel release list is provided; the patch was merged into the mainline kernel, so any kernel built from a source tree that contains the commit will be affected if the device is present.

The CVSS score is not supplied and EPSS is not available, but the documentation suggests the issue is limited to the internal handling of a driver event. Exploitation would likely require an attacker to trigger the TXRX_NOTIFY event through the device, which may be possible with a malicious device or firmware. Because the vulnerability triggers a kernel crash, the risk is primarily service disruption rather than privilege escalation or data breach. The CISA KEV catalog does not list the flaw, and no public exploits are known at this time.