The vulnerability lies in the Linux kernel's net: phylink subsystem, where the function phylink_inband_caps() fails to properly validate the pointer returned by mac_select_pcs. The pointer may be NULL or an error pointer, yet the code only checks for NULL before dereferencing, leading to a kernel crash through a NULL pointer dereference (CWE‑476). This results in a denial of service because the kernel panics and stops servicing requests until reboot.

All Linux kernels built with the phylink driver before the included patch are affected. No specific version range is provided, so the fix applies to all older releases that have not been updated to include the proper error pointer validation.

The CVSS score of 4.1 indicates low to moderate impact; no EPSS data is available, and the flaw is not listed in the CISA KEV catalog. The exploit path requires privileged kernel execution or a local vulnerability exploitation that can execute kernel code. The likely attack vector is local or via code execution inside the kernel rather than through a network service. Even though the vulnerability can cause a system crash, its exploitability does not provide a remote or stealthy foothold and thus is considered low risk in terms of threat exposure.