A flaw in the IBM emac driver causes an unconditional call to napi_disable() during module removal. When NAPI has never been enabled, the function spins indefinitely waiting for a state bit that never clears, leading to an unbounded kernel loop and a system freeze. This defect directly compromises system availability by rendering the entire kernel unresponsive.

All Linux kernel installations that contain the IBM emac driver are potentially affected. The CNA list lists Linux:Linux with no specific version windows, and no version ranges are provided by the advisory. Consequently, any kernel revision including this driver can be vulnerable unless patched.

No CVSS score is reported, and the EPSS value is not available, so the precise numeric risk cannot be quantified from the data. The vulnerability is listed as not included in CISA’s KEV catalog, indicating no publicly known exploitations at the time of information. Exploitation would require an attacker to unload or remove the affected kernel module, a privilege typically available only to privileged users or malicious code with elevated rights. If successful, the system will freeze, yielding a catastrophic denial‑of‑service outcome. The lack of an established KEV listing and an absent EPSS score suggest limited real‑world exploitation, yet the potential impact remains high for systems that rely on the driver or that can be coerced into unloading it.