The flaw in the Marvell MPIC driver for the Linux kernel arises when the network device driver disables a per‑CPU interrupt during interrupt service handling and schedules a NAPI poll. If the system enters suspend while the poll is still pending, the interrupt remains disabled and the driver never re‑enables it upon resume. The NIC receives interrupt requests, but the CPU never processes them, resulting in a complete loss of network connectivity. This denial of service directly affects the availability of network services on the affected machine.

Linux kernel builds that include the Marvell mvneta driver on platforms using the MPIC interrupt controller, such as the Armada 370, Armada 38x and related Armada XP devices. All affected kernel versions that compile the mvneta driver before the fix are vulnerable. No other vendors or product families are explicitly listed as affected.

The CVSS score is not listed, and no EPSS data is available, indicating that the risk assessment is based on the severity of the attack observable. The vulnerability is not currently included in the CISA KEV catalog. The likely attack vector is the normal power‑management sequence – when a suspend/resume cycle is performed, the system can be forced into a state where the per‑CPU interrupt remains masked. An attacker would need the ability to trigger suspend or delay resume in order to exploit this, but the outcome is a purely local denial of network service rather than remote code execution or credential compromise.