The Linux kernel’s wanxl device driver fails to verify that the PLX BAR has been successfully mapped before performing a hardware reset during probe failure cleanup. As a result, if early probe errors occur the driver attempts to reset the card via a NULL MMIO reference, causing a null pointer dereference and a kernel panic. This flaw results in a denial‑of‑service condition where the system becomes unstable and must be rebooted.

The vulnerability affects systems running the Linux kernel with the wanxl driver enabled. No specific kernel versions are listed in the available data, so any distribution that includes the affected driver code before the fix is potentially impacted.

The CVSS score and EPSS value are not provided in the data, and the vulnerability is not listed in the CISA KEV catalog. The attack surface is local to the PCI device initialization process, so exploitation requires an attacker with kernel or hardware access to trigger probe failures. The likelihood of such access and the specific method of triggering failures are not explicitly stated in the provided payload; thus, the conclusion about required access is inferred based on the nature of the kernel crash. Because the flaw manifests as a dereference of a NULL pointer, the impact is limited to a crash rather than remote code execution or data compromise. Overall, the risk is moderate to high for environments using the wanxl driver without the patch.