The flaw resides in the Linux kernel’s bnge subsystem, where a failure during auxiliary device allocation triggers a cleanup path that dereferences an uninitialized private structure. Because the code does not guard against a NULL pointer, the kernel may crash, leading to a denial of service. The weakness is a classic NULL pointer dereference error that gives a low‑level system component a severe fault when the auxiliary device fails to initialise.

All Linux kernel installations that include the bnge auxiliary device code and have not yet applied the commit that fixes the release callback. The vulnerability impacts the core kernel, so any system running a kernel built from the affected source tree is at risk until the patch is applied.

The CVSS score is not publicly listed; however, the exploit is straightforward once the faulty code path is reached. A local attacker with the ability to trigger device initialization or removal—such as through a malicious driver or hardware insertion—could cause the kernel to crash. The EPSS score is unavailable and the issue is not currently in the CISA KEV catalog, suggesting a lower public exploitation probability. Nevertheless, because the flaw can result in an immediate kernel panic, the risk is considered high to critical pending patch deployment.