The vulnerability is in the Linux kernel's mac80211 Wi‑Fi stack. When a Multi‑Link Operation (MLO) link is removed, the code frees the per‑CPU statistics buffer immediately but only defers the container to RCU. This allows the fast‑path RX code to later access a freed buffer while the container still exists, causing a use‑after‑free that can corrupt memory, crash the kernel, or lead to a denial‑of‑service. The weakness corresponds to a classic use‑after‑free race condition.

Linux kernel, all distributions based on it, before the update that includes the fix. The CVE affected any kernel that incorporated the hot‑patched commit. No specific version list was supplied, so any system running an affected kernel before the patch is at risk.

The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is not provided in the CVE data. Attack would require an attacker to craft special Wi‑Fi traffic that triggers the RX path while a link removal is in progress. The race condition is difficult to exercise reliably, so the practical exploitation probability appears low. Nevertheless, the potential impact of a use‑after‑free that could crash the kernel, or in a worst‑case scenario, cause arbitrary memory corruption, warrants monitoring and prompt patching.