This vulnerability occurs when the Linux kernel’s wireless configuration subsystem attempts to rename a wiphy after switching its network namespace. If the rename fails because of an allocation error, the kernel keeps the wiphy in the new namespace and leaves it in an inconsistent mixed‑namespace state, triggering a warning. The flaw is due to improper error handling and cleanup; it creates a residual inconsistency that can cause unstable networking or repeated warning messages. Based on the description, it is inferred that the kernel could suffer from repeated failures in namespace operations, leading to degraded wireless functionality.

All Linux kernels that implement the buggy cfg80211 subsystem before the fix are affected. The vulnerability is not tied to a particular vendor or distribution, so any Linux operating system using a kernel that contains this implementation before the patch is at risk.

The CVSS score is not specified, and the EPSS score is not available. The vulnerability is not listed in KEV. The flaw manifests as invisible state corruption rather than an externally exploitable flaw, so the likelihood of exploitation is uncertain. Based on the description, it is inferred that the attack vector would likely involve a local privileged user who can trigger dynamic wireless configuration changes. The risk is considered low to moderate until mitigation is applied.