A race condition occurs during the registration of a Hypervisor VHCA stats agent in the Linux mlx5e network driver. When the asynchronous control invalidation callback runs before the agent’s delayed work and agent pointer are fully initialized, the kernel may invoke a NULL function pointer or corrupt linked list structures, leading to a kernel panic. This classic initialization race can cause denial-of-service by crashing the kernel.

All Linux kernel builds that contain the net/mlx5e module and have not adopted the commit that fixes the race. Distributions that ship a recent 5.x Linux kernel with the mlx5e driver are potentially affected, regardless of specific distribution brand. Specific version information is not supplied in the CNA data, so affected versions cannot be enumerated.

The CVSS score of 8.4 classifies the vulnerability as high severity. The EPSS score is <1%, indicating a very low but nonzero chance of exploitation. The vulnerability is not listed in CISA KEV catalog, suggesting no known public incidents. Exploitation would require an attacker able to trigger the race condition, such as by manipulating timing from a privileged hypervisor or virtual‑machine environment; this is inferred, not directly stated in the advisory.