The flaw lies in the mac80211 subsystem of the Linux kernel, where extension frames were not fully validated before being processed by the generic RX path. As a result, the kernel could read regular header address fields from unsupported extension subtypes, leading to improper parsing and the potential for memory corruption. If an attacker could craft malformed extension frames and transmit them over a wireless interface, they might cause the kernel to misinterpret packet headers, resulting in a crash or denial of service. The weakness is rooted in insufficient input validation of network packet structures.

All Linux kernel implementations that use the mac80211 wireless stack are affected, regardless of distribution or vendor. Version information is not specified in the advisory, so any kernel build containing the unpatched mac80211 code is potentially vulnerable. No particular patch version is listed, but the reference commit identifiers point to a kernel update that addresses the issue.

Because the flaw operates at the kernel level, exploitation could have system-wide impact. The advisory does not provide a CVSS score or EPSS value, and the vulnerability is not listed in the CISA KEV catalog, making the exact exploit probability uncertain. However, the nature of the flaw—improper handling of externally supplied packet data—means that a successful exploit would likely trigger a kernel panic or corruption, delivering a denial of service effect rather than privilege escalation or data exfiltration. The risk is therefore considered moderate to high in environments that permit untrusted users to send wireless frames.