The defect resides in the Linux kernel network driver for Mellanox mlx5e. When a send queue is deactivated and re‑activated, the driver calls a routine that unconditionally resets the BQL (Dynamic Queue Limits) counters for all channels even if there are in‑flight transmit work queue elements. The reset over‑stores the BQL limits, and a subsequent completion that over‑charges the queue triggers an internal BUG_ON. This causes the kernel to panic, resulting in an immediate denial of service. The weakness originates from improper initialization of queue state and violates the kernel’s invariant that BQL counters must only be cleared when no data is outstanding.

Based on the commit references, it is inferred that all Linux kernel installations that contain the mlx5e network driver are affected. The vendor is Linux, the product is the Linux kernel. The specific kernel releases are not listed, but the commit references point to a change in the mainline tree that will apply to all supported kernels after the patch is merged.

The CVSS score is 5.5, and the EPSS score is < 1%, indicating a very low exploitation probability. The quantitative likelihood of exploitation can be considered low based on the EPSS value. Based on the description, it is inferred that a BUG_ON will be triggered on a completed transmission after a faulty reset; the bug is triggered by normal network traffic handling, so it can be exercised by any local user who can cause a queue re‑activation. The vulnerability is not listed in CISA KEV catalog, indicating no documented active exploitation. The risk remains significant because a kernel panic completely disrupts the system, but the exploitation vector requires local access to trigger the driver’s re‑activation path.