The rsi_prepare_beacon routine copies a Wi‑Fi beacon frame into a socket buffer without checking that the buffer’s tailroom is large enough for the payload. If the frame is larger than the available space, the copy overruns the buffer, corrupting kernel memory and creating an opportunity for an attacker to elevate privileges or crash the system. The flaw is a classic buffer‑overrun condition, exposing the kernel to memory corruption.

Any Linux system that loads the RSI Wi‑Fi driver and therefore uses the rsi_prepare_beacon function is affected. The specific kernel versions are not listed in the advisory, so a blanket upgrade of all Linux kernel releases that include the RSI driver update is required. The vulnerability targets the underlying network stack, not a specific application.

The flaw is a medium‑severity kernel memory corruption that could be used to execute arbitrary code with kernel privileges. The CVSS score of 5.5 indicates a moderate severity, while the EPSS score of < 1% suggests a very low likelihood of exploitation. The attack requires crafting and transmitting a malicious Wi‑Fi beacon to the affected device, making it a remote exploit via the wireless interface. No current active exploit is confirmed and the vulnerability is not listed in CISA KEV, but the possibility of privilege escalation warrants immediate remediation if the device operates on a wireless network.