A flaw in the wifi driver’s acpi module causes the kernel to perform a bit shift on a revision value reported in the WGDS table without first ensuring the value falls within the bounds required for a safe shift. The resulting undefined behavior can trigger a kernel crash and subsequently a denial of service to the affected system. The weakness stems from insufficient bounds validation on an input that drives a shift operation.

The vulnerability affects the Linux kernel’s iwlwifi wifi driver module across all editions of the kernel. No specific sub‑versions are listed, so any kernel build that includes the iwlwifi driver with the WGDS parsing code is potentially impacted.

The CVSS score is 5.5 and the EPSS score is less than 1%, but the absence of a KEV listing indicates no known widespread exploitation. The flaw remains a local, firmware‑level issue; an attacker would need access to or the ability to manipulate the firmware or WGDS table exposed to the driver. Even if exploited, the left‑hand effect is a crash rather than a full compromise. Nevertheless, the risk to availability warrants timely remediation.