The vulnerability is caused by the Linux liquidio network driver caching pointers to virtual function (VF) PCI devices in an internal lookup table without incrementing their reference count. When a reset request (OCTEON_VF_FLR_REQUEST) is processed, the driver later dereferences a stale pointer that may no longer refer to a valid device, leading to a kernel fault and system crash. This is a use‑after‑free flaw that results in a denial of service by corrupting kernel memory or causing a panic.

All Linux kernels that include the liquidio driver before the commit that removes the cached VF lookup table are affected. The issue applies to systems that enable SR‑IOV for virtual functions and rely on the liquidio network driver.

EPSS score < 1% and the vulnerability is not listed in CISA KEV, indicating limited public exploitation data. Based on the description, it is inferred that the attack vector requires local privilege or access to initiate a VF reset or to load the vulnerable module. The CVSS score of 9.3 indicates critical severity, and a single kernel crash can render a host inoperable, but likelihood of exploitation depends on privileged access to SR‑IOV device management.