The vulnerability in the Linux kernel's mac80211 subsystem allows an unregistered network device to remain referenced by the wireless interface list. When the device is removed without the proper cleanup path, the subsystem attempts to reference a nonexistent interface, triggering a kernel BUG and causing a panic. This results in a denial of service and potentially a full system reboot.

The flaw affects Linux kernel configurations that compile the mac80211 wireless stack. All Linux distributions distributing kernel images that include the mac80211 module are potentially impacted. Affected devices include those with Wi‑Fi adapters managed by cfg80211, such as most consumer laptops, embedded routers, and IoT devices that rely on mac80211.

This flaw lacks publicly available exploit code and has a CVSS score of 7; its EPSS score is < 1% and it is not listed in CISA KEV. Because the bug results in a kernel panic, a local attacker or one who can influence network device states may trigger it. The low EPSS and lack of known exploits suggests a lower current exposure, but the vulnerability’s severity in causing a system crash warrants immediate patching.