In the Linux kernel’s cfg80211 subsystem, stale BSS entries are removed by matching both the BSS itself and its type. When an access point advertises a different type, the removal logic drops the type check, leaving a mismatched entry that subsequently triggers a WARN_ON assertion during rehashing. The CVE description does not state that this causes a crash, but it does result in a kernel warning that may impact connectivity.

All Linux kernel implementations containing the cfg80211 subsystem prior to the commit that removed the BSS‑type filter check are potentially affected. The vendor/product identifiers in the record refer to the Linux kernel; no specific version numbers are listed, so any kernel build lacking the upstream patch may be vulnerable.

The flaw has a CVSS score of 8.8, indicating high severity. The EPSS score is below 1 %, and the vulnerability is not listed in the CISA KEV catalog, suggesting a low likelihood of exploitation. An attacker could trigger the warning by broadcasting a rogue BSS of a different type on a channel already carrying a legitimate BSS; this would remotely affect clients without privileged access. However, the CVE description does not confirm that the warning leads to a kernel crash, so the practical impact is limited to the generation of WARN_ON messages and potential Wi‑Fi disassociation.