This vulnerability leads to a kernel crash caused by a null pointer dereference during the cleanup of a channel switch in the mac80211 wireless mesh implementation. The crash manifests as a general protection fault and a KASAN null‑pointer ref error, causing the system to abort its wireless stack and potentially reboot. The primary impact is denial of service, as the affected device would become inoperable until a reboot or patch is applied. No active remote code execution or privilege escalation is directly enumerated in the description.

All Linux kernel installations that include the mac80211 wireless driver and support mesh networking may be affected, as the bug exists in the ieee80211_stop_mesh() path where channel switch context cleanup is performed. Affected products are broadly listed as Linux:Linux kernel; no specific kernel versions are given, so any version prior to the fix should be considered vulnerable if it compiles the unchanged code.

The EPSS Score is <1%, so the potential for exploitation is very low. The CVSS score is 5.5, classifying the vulnerability as medium severity. The bug has been reported in the kernel source, indicating it is a known defect rather than an exploited vulnerability in the wild. Based on the description, the likely attack vector is local, requiring the attacker to trigger a mesh resignation or channel switch. The crash results in a kernel denial of service on the affected device; the description does not indicate any remote code execution or privilege escalation. The overall risk is thus localized to the device and its immediate wireless network.