The flaw in Linux’s cfg80211 stack allows parsing of PMSR FTM requests with preamble values that fall outside the defined nl80211 range. Those erroneous values are used directly in capability bit tests before proper rejection, which can trigger undefined behavior and result in a kernel crash. The impact is a denial of service at the system level, causing the entire kernel to reboot or become unresponsive. This is an input validation weakness (CWE‑20).

All systems running a Linux kernel that includes the buggy cfg80211 parsing logic are vulnerable, regardless of vendor. The issue exists in the kernel’s Wi‑Fi driver stack prior to the commits referenced in the advisory URLs; any operating system using a kernel older than those fixes is affected.

While the CVSS score is not disclosed and the EPSS score is not available, the vulnerability is exposed to untrusted Wi‑Fi traffic. The likely attack vector is the reception of maliciously constructed Wi‑Fi frames over the air, which an attacker can control even from a remote location within range of the wireless interface. No active exploitation has been reported and it is not listed in CISA’s KEV catalog, suggesting a low to moderate risk if the system operates in a trusted environment. However, in an untrusted wireless environment the risk rises to high due to the straightforward ability to trigger a crash with crafted frames.