A potential integer underflow was discovered in the iwlwifi driver when processing wowlan packets. If firmware supplies a length that is not trustworthy, the driver may compute a negative size and copy memory beyond the intended bounds, resulting in memory corruption. This flaw could cause a kernel crash or, in the worst case, privilege escalation or remote code execution. The weakness is an integer underflow that leads to a buffer overflow.

The vulnerability targets Linux kernel implementations that include the iwlwifi wireless driver, specifically the mvm sub‑module that handles wowlan packets. All kernel versions lacking the recent patch commits are susceptible; the vulnerable code is present in any kernel release that ships with the unpatched iwlwifi driver. The CNA lists only Linux:Linux, so the impact is confined to Linux systems using this driver.

The CVSS score is not publicly disclosed; EPSS is not listed and KEV is not featured, so the formal severity metrics are unavailable. Nevertheless, the event involves kernel memory corruption, which the industry treats as high impact. The likely attack vector is the delivery of crafted wowlan packets via wireless firmware, requiring the attacker to influence packet lengths sent to the driver or to supply malicious firmware. Based on the description, it is inferred that environments with custom or third‑party firmware may be at higher risk. No public exploit or proof‑of‑concept has been reported, so the actual exploitation potential remains theoretical.