A failure in the WWAN T7xx driver caused the kernel to dereference a NULL pointer during control frame transmission. When the driver attempted to clone an skb fragment, the clone could fail and the code would still use the resulting NULL pointer, leading to a kernel panic and service disruption. This flaw results in a local denial‑of‑service condition as the panics force a reboot or halt of the affected system.

The vulnerability affects all Linux kernel releases that include the WWAN T7xx driver without the recent patch. No specific version range is listed in the public advisory, so any distribution kernel employing the t7xx_port_ctrl_tx routine is potentially exposed until the driver includes the NULL check introduced in the latest commit.

The likely attack vector is a maliciously crafted WWAN control packet; the fault occurs during the processing of such frames. The CVSS score is 5.5 and the EPSS score is under 1%, indicating a low probability of exploitation. The vulnerability can still cause an immediate crash if an attacker can trigger the control transmission path, leading to a denial‑of‑service condition in systems exposed to untrusted cellular traffic.