When the Marvell mvneta network driver handles an interrupt, it masks the per‑CPU MPIC interrupt and schedules a NAPI poll that will unmask it after completion. If the system is suspended while the poll is still pending, the interrupt remains masked once the machine resumes, even though the NIC continues to generate interrupts that the CPU never receives. This results in a complete loss of network connectivity. The weakness is an improper restoration of a critical resource, corresponding to CWE‑732: Incorrect Permission Assignment for Critical Resource.

All Linux kernel builds that include the mvneta driver for MPIC‑based Marvell platforms, such as Armada 370, Armada 370 XP, and Armada 38x, are affected. Any kernel version compiled with this driver prior to the fix is vulnerable; the advisory does not specify a granular version range.

The CVSS score of 7.5 indicates high severity, but the EPSS score of < 1% shows very low likelihood of exploitation in production environments. The vulnerability is not listed in CISA KEV. Based on the description, it is inferred that the likely attack vector requires an adversary with local system access who can trigger a suspend/resume cycle while the affected interface is active, such as a user with the ability to control power management or to initiate a suspend. The impact is a local Denial of Service to network services; no remote code execution or data breach is possible.