The vulnerability originates in the Linux kernel's wireless subsystem, where the handling of received HE operation elements in beacon frames is insufficiently validated. The HE operation element must be longer than the fixed portion and have a size appropriate for its variable part. Failure to enforce these constraints can allow malformed beacons to trigger undefined behavior that might affect kernel stability. The reported fix explicitly rejects problematic beacon frames, preventing the undefined behavior issues described.

All Linux kernel deployments are potentially affected, as the vulnerability is present in the generic nl80211 wireless stack. The impacted environment includes any system running a version of the Linux kernel that does not yet incorporate the patch. No specific hardware or distribution variants are singled out beyond the generic Linux kernel product.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score is reported as < 1%, suggesting low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog, implying it has not yet been observed as a exploited vulnerability in the wild. Attackers would need to force a victim’s device to process maliciously crafted beacon frames containing malformed HE operation elements. The lack of public exploitation data suggests that there is currently no known exploitation, though the potential for undefined kernel behavior remains a concern for systems exposed to untrusted Wi‑Fi environments.