A null pointer dereference occurs in the Linux kernel's netfilter connection tracking subsystem when the genid extension infrastructure is reused for unconfirmed conntrack entries. The code path can create a NULL extension and later dereference it without a NULL check, which triggers a kernel panic and brings the entire host to a halt, effectively denying service to all network operations on that machine.

The flaw is present in every Linux kernel version that still contains the reverted genid code path. Vendor data lists the flaw with “Linux:Linux”, indicating all distributions that ship the stock Linux kernel are potentially affected until the regression is corrected. Exact kernel versions are not specified, so any kernel that still contains the reverted genid logic remains vulnerable.

The CVSS score of 5.5 classifies the vulnerability as medium severity. The EPSS score of <1 % indicates a very low likelihood of exploitation in the wild. The flaw is not currently listed in the CISA KEV catalog, and no publicly known exploits exist. If the vulnerable code path is triggered it will result in an uncontrollable kernel panic, but the probability of such an event under normal operations remains low.