Impact
In the Linux kernel’s WLAN subsystem, a logic error causes the driver to call a failure‑handling routine when a NAN (Neighbor Awareness Networking) reconfiguration fails, marking all interfaces as detached from the driver. The error path then tears down every wireless interface. If other interfaces are present, their state is not reported back to the driver, leaving driver objects with invalid pointers, which can lead to a kernel crash and loss of Wi‑Fi service.
Affected Systems
All Linux kernels containing the mac80211 subsystem before the commit that removes the misplaced call are affected. The CNA listing provides only the generic Linux kernel product; no specific version range is supplied, so any distribution running an unpatched kernel is potentially vulnerable.
Risk and Exploitability
The likely attack vector is inferred to be local or privileged access to trigger a NAN reconfiguration failure, as the flaw is exercised only when that failure occurs. Once triggered, the improper error handling can corrupt driver data, culminating in a kernel crash and denial of service. The CVSS score is 5.5, the EPSS score is below 1%, and the vulnerability is not in the CISA KEV catalog, indicating low public exploitation probability but a clear impact on availability.
OpenCVE Enrichment
Debian DLA
Debian DSA