The Linux kernel bug occurs when a network namespace is destroyed and the cfg80211 subsystem attempts to move wireless devices (wiphys) back to the initial namespace. If the move fails due to allocation problems, the wiphy is left with an invalid pointer that later causes a kernel fault at address 0x30. An attacker able to trigger namespace destruction can force a kernel crash, resulting in a loss of system availability.

All Linux kernel releases prior to the inclusion of the fix identified in the referenced git commits are affected. No specific version range is listed, so any kernel lacking the patch can potentially be vulnerable.

The vulnerability has a CVSS score of 7, indicating high severity. The EPSS score is < 1% (0.00129). It is not listed in the CISA KEV catalog. Exploitation requires the ability to destroy a network namespace, which normally requires root or the CAP_NET_ADMIN capability. Therefore the risk is a local denial of service that may be leveraged by privileged users or container environments with elevated permissions.