The vulnerability occurs in the Linux kernel’s mac80211 wireless subsystem, where a failed interface activation leaves the radio LED timer running. During the error path the timer is freed while still active, which can trigger a use‑after‑free condition and potentially cause a kernel panic, leading to service interruption.

All Linux kernel builds that include the mac80211 subsystem before the patch in commit 78183e8331958fda11cd2b6850bb424a9747c4b2 are affected, including every kernel version released prior to the corresponding fix across all distributions that ship the generic Linux kernel.

The CVSS score is 7.0, but the EPSS score is < 1%, indicating a very low exploitation probability. The vulnerability is not listed in the CISA KEV catalog, suggesting it is not currently widely exploited. Based on the description, the likely attack vector is local or network‑based through manipulation of wireless interface configuration. If an attacker can force the interface to fail repeatedly, it could induce a kernel crash and cause a denial of service. Offline exploitation would be difficult without privileged access to the target system.