Based on the description, it is inferred that an attacker could feed a malformed NDP that causes the driver to spin forever on a single CPU core, consuming 100% of that core’s capacity. The vulnerability is a logic flaw in the Linux kernel’s mhi_wwan_mbim driver that allows a modem to construct a cyclic or self‑referencing Network Data Path (NDP) chain. When the driver’s receive routine traverses the chain, the loop only terminates when the next offset is zero; it never checks that the offsets are strictly increasing. The resulting denial‑of‑service can render the system unresponsive if the affected driver is active.

All Linux kernel builds that include the mhi_wwan_mbim driver are potentially affected. The specific kernel versions are not enumerated in the data, so any kernel containing the unpatched commit is at risk until the patch is applied.

The CVSS score of 5.5 indicates moderate severity. The EPSS score of <1% indicates a very low exploitation probability, so the exact quantitative risk cannot be derived. Based on the description, it is inferred that the exploit requires interaction with the modem’s networking stack, implying that a local or privilege‑escalated attacker could supply the malicious data. There is no evidence that automated exploits are currently in use or that the vulnerability is listed in CISA’s KEV catalog. The destructive potential of a CPU‑exhaustion loop is significant, especially on systems with limited cores or in multi‑tenant environments.